PKWare gives corporate users security with a Zip. 
Network-based storage virtualization finally materializes. 
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Funding Scrutiny May Spread 
Ptech isn’t unique in 
having suspected ties 
to terrorist financiers _ 


BY DAN VERTON 

Enterprise software company 
Ptech Inc. may be only one of 
many firms that could be in- 
vestigated for having possible 
links to terrorist financiers, 
experts on terrorism and crisis 
management are warning. And 
other companies do in fact 
have histories similar to that 
of Ptech, Computerworld has 
confirmed. 


Fujitsu Sets 
High- -End 
Linux Plans 


Unix server vendor 
embraces Intel chips 
and open-source OS 
BY JAIKUMAR VIJAYAN 
Fujitsu Ltd., which in the serv- 
er market is known primarily 
for its high-end Unix systems 
based on Sun Microsystems 
Inc.’s SPARC architecture, last 
week said it plans to use Intel 
Corp.’s processors to develop 
a new family of enterprise- 
class Linux machines. 
Tokyo-based Fujitsu said it 
hopes to start shipping dual- 
processor Linux systems in 
the second half of next year. 
The company added that the 





“It behooves a company to 
look at investors, their reputa- 
tions and where they have in- 
vested in the past,” said Leo- 
nard Fuld, founder of Fuld & 


Co., a Cambridge, Mass.-based | 


competitive intelligence con- 
sulting firm. “The onus is still 
on the companies.” 

Start-up firms, which tend 
to be especially anxious to 
make sales and attract in- 
vestors, need tc do more re- 
search into whom they do 
business with, said Larraine 
Segil, an expert in strategic 


Ptech, page 45 


JUST THE FACTS 


Linux line will be topped off 
by a 128-CPU server based on 
Intel’s 64-bit Itanium 2 proces- 
sor. That’s the largest Intel- 
based commercial Linux sys- 
tem announced thus far, but it 
isn’t slated to ship until 2005. 
Fujitsu’s planned move into 
Fujitsu, page 14 
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BY TODD R. WEISS 
NEW YORK 

After years of running dis- 
parate Unix-based systems in 


Unilever is committing its 
| technological future to Linux. 
The $52 billion 
consumer products 
| company plans to 
switch to Linux on Intel-stan- 
dard hardware in all 80 coun- 
tries where it operates. “We 
believe ... that it will [meet] 
all of our computing needs in 
the eight- to 10-year time 


its global IT server operations, 


UMUXWORLD) 


frame,” said Colin Hope-Mur- 


ray, CTO of the global infra- 
structure group at Unilever. 
“We want to be able to 
cookie-cut our systems and 
deliver them around the 
world” without having to wor- 
ry about operating 


compatibility is- 
sues, Hope-Murray said. The 
company currently runs sys- 
tems with Hewlett-Packard 
Co.’s Tru64 version of Unix 
and IBM’s AIX, after having 
already migrated some appli- 


system or hardware 





Unilever Dumping Unix 
For Linux in Global Move 


Buy-in from HP, IBM key as company embarks 
on decade-long systems standardization plan 


cations off of HP-UX. 
The company, which has 


| dual headquarters in London 


and Rotterdam, Netherlands, 
made the announcement here 
last week at the LinuxWorld 
Conference & Expo. 
Hope-Murray said Unilever 


will make the migration from 


Unix to Linux to simplify and 
standardize its IT architecture 
as well as to spread the re- 


| duced operational costs and 
| increased performance the 


company has already seen 
using Linux for Web servers, 
e-mail servers, proxy servers 
and firewall applications. So 
Unilever, page 14 
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| Viruses 
' S'Smarter 


The accelerating pace of 


new viruses — 
7,000 last year alone — 
one problem facing security 

professionals. A new class of 


Ta 


more than 
is just 


emerging viruses and worms 


is expected to attack multiple 


vulnerabilities simultaneous- 
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ly, exploit new ones, and try 
to steal data rather than sim- 
ply destroy it. PAGE 21 





Wants to write e-mails offline 








Recognize any of those issues? Or, perhaps, all of them? We thought 
so. Many ofthese issues can be related to your legacy desktop 

software. Fortunately, many of them can be addressed by features i in 
Microsoft® Windows® XP Professional and Office XP Professional. 





Want specific examples? Windows XP Professional offers new 
Remote Assistance, which enables you to view a user's screen and 


control the user’s computer to solve technical problems from afar. 





HTTPS, and FTP, which means you can install and maintain the suite 
directly from a Web server or a file share on your network. And finally, 
several new features make deployment easier than ever. For more 
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Office XP Professional gives you installation support for HTTP, 


ideas about managing your desktops, visit microsoft.com/desktop 
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Agents of Change 


In the Technology section: Agent-based modeling and complexity 


the ivory towers to help manage unruly supply chains. Page 26 
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Save That Mail 


in the Management section: Archiving e-mails has be- 
come a serious business as courts and industry regula- 
tors increasingly order expensive searches and issue 
stiff fines for lost or poorly stored e-mails. Page 33 
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PKWare offers some security 
to corporate users of its data 
compression technology. 


WorldCom and Sprint are 
helping users move closer to 
IP-based networks without 
having to fully abandon tradi- 
tional technologies. 


Retailers begin to check out 
platform-neutral Java-based 
systems as they revamp their 
point-of-sale operations. 


BEA Systems introduces a 
service that aims to help Java 
developers incorporate XML 
data into their applications. 


BMC Software adds the abili- 
ty to identify network faults 
to its Patrol Visualis perfor- 
mance monitoring software. 


HP plans to combine its 
VersaStor software with a 
data replication device and 
new storage switches made 
by Brocade. 


Imerys bypasses big-name 
proxy servers to give its 3,000 
users remote access to iNotes. 


Up to 45% of IT workers in 
the U.S. and Canada could see 
themselves replaced by 2005, 
according to a new report. 


Reuters says more than 
225,000 end users have signed 
up for its messaging software. 


Users at Oracle’s Apps- 
World conference said efforts 
to make E-Business Suite Lli 
applications less complex to 
install may be paying off. 


21 Viruses Get Smarter. You 
thought Sircam, Klez and 
Nimda were threats, but virus 
writers were just warming up. 
A new generation of viruses 
will be more sophisticated, 
more difficult to detect — 
and more dangerous, experts 
predict. 


28 Future Watch: Intelligent 
Storage. Object-based stor- 
age technologies promise 
to reduce server I/O and 
eliminate the need for clients 
to speak in either blocks or 
file format. 


30 Security Manager’s Journal: 


Security Problems Put Sur- 
vey App on Sidelines. Design 
flaws in a Web-based survey 
application leaves sensitive 
data unprotected, so Mathias 
Thurman makes fixing it a 
top priority. 


MANAGEMENT 





36 Home-Schooling IT Talent. 


FedEx and other forward- 
thinking companies are team- 
ing up with neighboring uni- 
versities to teach the IT skills 
their businesses require. 


38 Big Recruiters on Campus? 
Not This Year. College re- 
cruiting stalls as experienced 
IT pros swell the ranks of the 
unemployed. 


: 39 Handling the Hard Case. Try- 


ing to motivate a problem IT 
person may be the wrong ap- 
proach, writes Nigel Nichol- 
son in this month’s Harvard 
Business Review. 


8 


On The Mark: Mark Hall chats 
with a Wintel advocate who 
worries that the duopoly’s 
success in high-performance 
systems may hurt U.S. super- 
computing competitiveness 
in the future. 


Patricia Keefe analyzes the 
sudden shift in vendor priori- 
ties to bring their technolo- 
gies in line with user expecta- 
tions and business needs. 


Michael Gartenberg identi- 
fies three technology initia- 
tives that every IT shop 
should be working on now. 


Emmet Cole argues that Mi- 
crosoft’s Palladium is as much 
a ploy to exclude non-Win- 
dows systems from business 
as it is to offer better security. 


Tommy Peterson says that 
the wait is over — wireless 
networking has arrived in 
corporate IT. 


40 Bart Perkins offers tips on 


how to complete your proj- 
ects within budget and with 
all the desired features. 


46 Frankly Speaking: Frank 


Hayes has an uneasy feeling 
that Carly Fiorina has uncov- 
ered an unpleasant truth 
about the grim future of IT 
budgets. 
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Keep up with the technologies, issues and 
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for secure communications, and how to buy 
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DEVELOPMENT Migrating Java apps to .Net, 
using regular expressions, and combatting 


coding errors. @ QuickLink k1100 


MOBILE/WIRELESS Getting tough with your 
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STORAGE Using policies and automation to 
manage storage resources. @ QuickLink k1700 
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AT DEADLINE 


Gates Provides 
Security Update . . . 


A year after launching his Trust- 
worthy Computing initiative, Bill 
Gates, Microsoft Corp.’s chairman 
and chief software architect, said 
in an e-mail to customers that ef- 
forts to better secure Microsoft 
products are continuing. “While 
we've accomplished a lot. . . 
there is still more to do - at Mi- 
crosoft and across our industry,” 
Gates said. He promoted the use 
of smart cards and said Microsoft 
is developing a system for sending 
security bulletins via e-mail. 


. .. As Microsoft 
Posts Warnings 


Prior to the release of Gates’ mes- 
sage, Microsoft warned that a se- 
curity flaw in the Microsoft Loca- 
tor service included with Windows 
NT 4.0, 2000 and XP could be 
used to take control of systems. 
The company gave the problem a 
“critical” severity rating and 
urged users to install a new 

patch. Microsoft also warned of 
holes in its Outlook 2002 and 
Content Management Server 
2001 products. 


Top IT Executive 
Quits Merrill Lynch 


Merrill Lynch & Co. announced in 
an internal memo that John 
McKinley will leave his job as 
chief technology officer and exec- 
utive vice president of its Global 
Technology & Services unit at the 
end of next month. McKinley 
plans to take a job in the technol- 
ogy industry, according to the 
memo. Merrill Lynch said he will 
be replaced by John Cummings, 
chief operating officer of the tech- 
nology and services group. 


Short Takes 


CISCO SYSTEMS INC. said it’s buy- 
ing Okena Inc., a Waltham, Mass.- 
based vendor of intrusion-detec- 
tion software. . .. Worldwide 
server shipments grew 4.2% last 
year, according to San Jose- 
based DATAQUEST INC. 





PKZip upgraded 


for Windows, Unix 
and IBM systems 


| BY JAIKUMAR VIJAYAN 


KWARE INC. last week 
said it’s trying to make 
it safer for users of its 
PKZip data compres- 
sion technology to send and 


| receive files over the Internet 


by adding new encryption 
capabilities to the software. 

The Brown Deer, Wis.- 
based company said Version 
6.0 of PKZip for Windows and 
Unix users includes a new se- 
curity module based on the 
BSAFE encryption technology 
developed by Bedford, Mass.- 
based RSA Security Inc. 

The module lets users pro- 
tect documents via password- 


or certificate-based encryp- 


tion before they’re transmit- 
ted, PK Ware said. The compa- 
ny added that the Windows 
release also features new sup- 


| port for IBM’s Notes software, 


which lets users compress and 
encrypt e-mail attachments. 
PKWare also announced re- 


| leases of its software for IBM’s 


mainframes and iSeries 


| servers that support up to 256- 


bit symmetric key encryption 
based on the Advanced En- 
cryption Standard. The iSeries 
systems were previously 
known as the AS/400 line. 


Securing Critical Data 
Features such as the ones 
announced last week are cru- 
cial to corporate users who 
depend on PKWare’s compres- 
sion products to send or re- 
ceive important data files, said 
Gene Knobloch, IS manager at 
Gilsbar Insurance Services 
Inc. in Covington, La. 

Gilsbar has been using 
PKZip technology for several 
years to compress and send 
medical insurance claims data 
from its AS/400s to systems at 


its clients in the health care in- | 


dustry and to insurance com- 
panies and clearinghouses. 





NEWS 


With an April 1 deadline 
looming for complying with 
the federal Health Insurance 
Portability and Accountability 
Act, Knobloch said Gilsbar 
plans to use PK Ware’s new 
software to compress and en- 
crypt all records containing 
patient health information, as 
required by the law. 

The new encryption func- 
tionality has been very easy to 
implement, he added. But 
Knobloch said many of the 
clients and insurers that Gils- 
bar deals with have standard- 
ized on encryption technolo- 
gies developed by Palo Alto, 
Calif.-based PGP Corp. Be- 





PKWare Adds Encryption 
‘To Compression Software 


cause of that, it has been a 
challenge to get some of them 
to accept encrypted PKZip 
files from Gilsbar. “But we are 
taking that on one client at a 
time,” Knobloch said. 

PKZip and similar compres- 
sion technologies have pri- 
marily been used at the client 
level in the past. But now, 
“there is significant interest in 
compression and encryption 
at the server level for batch 
file transfers,” said David 
Thompson, an analyst at Meta 
Group Inc. in Stamford, Conn. 

Encryption that’s built in at 
the operating system level, 
which Microsoft includes with 


www.computerworld.com 


PRODUCT DETAILS 


ving capat 


RSA’s BSAFE-enabled 


encryption for Windows 
and Unix users 


Support for Notes, letting 
Windows users compress 
EUR lias) Meee uir- UU CC 
TLL ey 


256-bit encryption for 
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Windows, generally works 
well for protecting files on in- 
dividual servers, Thompson 
said. But technologies like 

PK Ware’s can protect files 
even when they’re transferred 
from one system to another, 
he added. B 





WorldCom, Sprint Take 


Transitional Steps to IP 


Services designed 
to let customers 
migrate in stages 


| BY MATT HAMBLEN 


WorldCom Inc. and Sprint 


| Corp. plan to separately offer 


corporate users more IP-based 
network service op- 
tions, including vir- 
tual private network 
(VPN) capabilities that run on 
top of traditional technologies 
such as frame relay. 

WorldCom last week an- 
nounced the addition of real- 
time performance reporting 
and traffic management capa- 
bilities to its 2-year-old VPN 
service. Sprint today plans to 
launch three new services, in- 
cluding one designed to help 
users transition from frame re- 
lay circuits to IP VPNs. 

Both companies realize that 
users who have tightened up 
their IT budgets because of 
the sluggish economy are un- 
likely to disconnect their 
frame-relay or Asynchronous 
Transfer Mode networks and 
move completely over to IP- 


Cars 





based services at this time, 
said Max Smetannikov, an an- 
alyst at Current Analysis Inc. 
in Sterling, Va. 

“WorldCom and Sprint are 
both developing in-between IP 
products for intermediate 
steps by customers,” Smetan- 
nikov said. “Both are adapting 
to anew economic 
environment with 
incremental spend- 
ing and slow migration.” 

Corporate spending on 
voice services is down, and in- 
vestments in data services are 
generally flat, said Steve Har- 
ris, an analyst at IDC in Fram- 
ingham, Mass. However, IP- 
based VPNs are one of the few 
bright spots for network oper- 
ators, he said. 

“Companies are clamoring 
for IP VPNs, and half of U.S. 
companies have one in place,” 
Harris said. IP VPNs can help 
IT managers increase network 
security, simplify administra- 
tion and lower costs compared 
with more traditional network 
alternatives, he noted. 

Still, carriers such as World- 
Com and Sprint make up a rel- 





atively small part of the IP 
VPN market. Harris said net- 
work-based services comprise 
about 10% of the market, with 
current annual spending at 
nearly $700 million. By com- 
parison, $8.4 billion is spent 
annually for IP VPN equip- 
ment installed at customer 
sites, according to Harris. 

Sprint will introduce frame- 
relay, private line packet-data 
and virtual LAN services built 
around its SprintLink native 
IP network. All of the services 
will be made available imme- 
diately. Company officials said 
frame-relay packets will run 
securely over SprintLink, mak- 
ing it possible for customers 
to still use their existing 
frame-relay equipment. 

Pricing wasn’t disclosed, but 
Pete Parish, director of product 
marketing at Sprint, said the 
new approach should save cus- 
tomers up to 20% compared 
with frame-relay fees, includ- 
ing the cost of permanent vir- 
tual circuits and port fees. 

Harris pointed out that the 
new ability for users to moni- 
tor WorldCom’s network per- 
formance could help the 
struggling company increase 
its business, since many net- 
work managers “don’t trust 
the carriers” to meet agreed- 
upon service levels. D 
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Retailers Explore Java POS Systems 


See benefits of portability, easy-to-modify 
code, as well as possible decrease in costs 





BY CAROL SLIWA 

Growing numbers of retailers 
are scoping out Java-based 
point-of-sale (POS) systems as 
one option to replace their ag- 
ing cash registers. 

Several retailers that are ei- 
ther deploying or piloting Java 
POS systems said they like the 
fact that the software can run 
on any hardware or operating 
system and also noted that 
they’re finding the code easy 
to modify as their needs ex- 
pand. Some also reported de- 
creases in implementation and 
support costs, depending on 
the additional systems choices 
they have made. 

“We want something that 
won't lock us into any particu- 
lar platform and will give us 
the flexibility to deploy it in 
whatever way we'd like in the 
future,” said Mike Prince, CIO 
at Burlington Coat Factory 
Warehouse Corp. in Burling- 





ton, N.J. Prince said his com- 
pany has committed to a Java 
POS system on Linux and is 


| rolling out the Linux operating 


system but has postponed the 
Java POS portion because of 
competing projects. 

Robin Lynas, 

CIO at Mark’s 

Work Wearhouse & 
Ltd., a Calgary, Al- 
berta-based chain 
that was acquired 
last year by Cana- 
dian Tire Corp., 
found himself 
peppered with 
questions from 
fellow retailers at 
the National Retail Federation 
Conference & Expo earlier this 
month in New York. 

The Canadian retailer has 
rolled out its Java POS system 
from Retek Inc. to new Linux- 
based IBM terminals at 70 
stores. Plans call for the roll- 


| Open systems?’ ” Lynas re- 


We want 
something 
that won't lock 
us into any par- 
ticular platform. 


eeeereeseseses 


MIKE PRINCE, CiO 
BURLINGTON COAT FACTORY 


| central servers at the home of- 
| cording to Retek Chief Tech- 


| Mark’s Work Wearhouse has 


out at the remaining 240 
stores to be completed by the 
end of June. 

“My guys said, ‘Do we really | 
want to pay Microsoft licens- 
ing fees? Why don’t you go 


called. Once they proved that 
the POS system would run on 
Linux, he was sold. 

Mark’s Work Wearhouse 
claims to have 
lowered store 
opening costs by 
30% and mainte- 
nance costs by 
50%, in part be- 
cause it no 
longer needs in- 
store servers. 
The registers will 
connect directly 
via frame relay to 


eeeereecece 


fice, thanks in part to Java’s 
networking class libraries, ac- 


nology Officer John Gray. 
Another advantage that 


found is the ease with which 





New BEA Service Helps 
Java Developers Use XML 


Separately, Sun 
ONE Studio gets 
modeling tool 


BY CAROL SLIWA 
BEA Systems Inc. today plans 
to introduce a hosted service 
that it claims will help Java de- 
velopers incorporate XML 
data into their applications. 

The San Jose-based compa- 
ny is launching a beta version 
of BEA XMLBeans through its 
Web site. Developers who 
submit XML schema will gain 
access to a set of Java classes 
that they can use in their ap- 
plications to manipulate XML 
data, according to Carl Sjo- 
green, a senior product man- 
ager at BEA. 

Sjogreen said companies in- 
vest in XML schema to de- 
scribe XML data, but when 





they try to bring the XML 


schema into a Java application, | 


they often lose the constraints 
or validation rules, since only 


schema is preserved. 

To work with XML, Java de- 
velopers often have to write 
tedious code to walk through 
the low-level structure of 
XML information, or they 
have to force-fit XML data 
into their Java applications, 
Sjogreen said. 

BEA plans to conduct a live 
online seminar on Wednesday 
at noon EST to explain how 
XMLBeans works. 


Sjogreen said BEA will work | 
to standardize XMLBeans ei- 


ther through the Java Commu- 
nity Process or the open- 
source community. 

In a separate development, 
Sun Microsystems Inc. today 


| integrated development envi- 


| ing manager for Sun ONE Stu- 
the basic structure of the XML | 


| gration with Sun ONE Studio. 


| Studio, but developers who 
| choose to purchase the license 


| For more information about application 





plans to announce that a Uni- 
fied Modeling Language 
(UML) tool from Embar- 
cadero Technologies Inc. will 
ship with its Sun ONE Studio 


ronment (IDE). 
Jeff Anders, a group market- 


dio, said customers have been 
asking for UML modeling ca- 
pabilities in IDEs, and Sun 
chose Embarcadero’s tool, in 
part, because of its tight inte- 


ACD containing Embar- 
cadero’s Describe 6.0 product 
will ship in the same box as 
the next version of Sun ONE 


will have to contact Embar- 
cadero, Anders said. Sun won't | 
be selling the product. D 


development, visit our Knowledge Center 
QuickLink k1100 
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developers can bolt on new 
applications that connect to 
the POS system. Those include 
Web site, time sheet, business 
account and Web reporting ap- 
plications, Lynas said. 

“Retek gives you the Java 
source code for their POS ap- 
plication,” Lynas said. “You 
just take the objects they’ve 
got and extend them and write 
your new functionality.” 


Java at Home Depot 
Atlanta-based The Home De- 
pot Inc., whose IT shop is 
heavily invested in Java, set- 
tled on a Java POS system 
from 360Commerce Inc. in 
Austin, Texas, so it would be 
able to migrate code between 
clients and servers running 
disparate operating systems, 
said Ray Allen, director of IT. 
The POS terminals run 
Windows 2000, and the serv- 
ers run different flavors of 
Unix from Hewlett-Packard 
Co. and IBM, Allen noted. 
“POS applications typically 
live for 10 to 12 years, and 
they’re very tightly integrated 
with whatever the retailer 
chooses to provide,” he said. 
“So you're trying to make the 


best guesses for what might be | 


going on five to six years 


| down the road.” 


Allen said changes can be 
made “much easier and faster 
with a component-based solu- 


tion, [distributed] architecture | 


and object-oriented language 
like Java.” 

Jerry Rightmer, CTO at 360- 
Commerce, said building a 
POS system in Java was “a fair- 
ly risky decision” in 1997 when 
his company began developing 
products. But he said the list 
of Java POS vendors is grow- 
ing and now includes PCMS 


| Datafit Inc., JDA Software 


Group Inc. and Triversity Inc., 
among others. 
“The language is easier to 


| work with than previous gen- 
| erations of languages, it’s 


more productive than C or 
C++, and it has all the benefits 
of object-oriented languages 
without some of the traps and 


| pitfalls of C++ in particular,” 





Java POSitives 


Reported benefits from 
Java point-of-sale systems. 
include their ability to: 


a Run on any hardware 
or operating system 

@ Run as thin clients on 
older hardware 


= Be modified easily 


he said. “Plus, it has an ex- 


| tremely rich set of APIs that 


has made it easy for us to inte- 


| grate with third-party middle- 
ware and databases.” 


Urs Karrer, an analyst at 


| McLean, Va.-based Bearing- 


Point Inc., which was formerly 
KPMG Consulting, said he 
thinks more vendors ultimate- 
ly will opt for Java for porta- 


bility reasons. But he’s not so 


sure how much that will mat- 
ter to customers. “Retailers 
don’t care that much unless 
they have a custom develop- 
ment shop,” Karrer said. 
James Crawford, an analyst 


| at Forrester Research Inc. in 


Cambridge, Mass., said the re- 
tail trend toward new POS 


| systems has nothing to do 
| with Java, Microsoft Corp.’s 


-Net or any other development 
platform. He said retailers 
simply want an open POS sys- 
tem that can be used with any 
hardware or software, as op- 
posed to old POS systems that 


| often had integrated and pro- 


prietary hardware, software 
and data platforms. 
But Paula Rosenblum, an 


| analyst at AMR Research Inc. 
| in Boston, said the Java POS 


story has become interesting 
because of some very high- 
profile pilots, and she expects 
rollouts to escalate this year. D 
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Corrections 

In last week’s Page One story 
“GPS Jammers Raise Concern,” 
there was an incorrect reference 
to the altitude of GPS satellites. 
The altitude is 20,000 kilometers. 


Also last week, in a Q&A on page 
5, the name of the former ClO 

at Sears was spelled incorrectly. 
The correct spelling is Jerry Miller. 
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Microsoft Ships 
CRM Software 


Microsoft Corp. has made its 
customer relationship manage- 
ment (CRM) applications avail- 
able to users in the U.S. and 
Canada. It had delayed the CRM 
release last month but said the 
software should be ready within 
a matter of weeks [QuickLink 
35263]. Versions of Microsoft 
CRM for users in Europe, Asia 
and Latin America are due in the 
second half of the year. 


Forrester Agrees 

To Acquire Giga 

in a deal that would combine two 
high-profile IT consulting firms in 
Cambridge, Mass., Forrester Re- 
search Inc. has agreed to buy 
Giga information Group Inc. for 
$51 million in cash. No layoffs 
are currently planned, they said. 
The acquisition is expected to be 
completed next month if 90% of 
Giga’s shares are pledged to For- 
rester under a tender offer. 


Lucent Sees Loss, 
Inks Cisco Deal 


Lucent Technologies Inc. report- 
ed a $264 million net loss on 
revenue of $2.08 billion for its 
first quarter, which ended Dec. 
31. The revenue level was down 
42% from $3.58 billion in the 
same period a year earlier. Mur- 
ray Hill, N.J.-based Lucent also 
said it plans to resell some of 
Cisco Systems Inc.’s mobile 
voice and data networking 
equipment as part of its product 
line for network operators. 


Short Takes 


The judge overseeing SUN MI- 
CROSYSTEMS INC.’s antitrust 
lawsuit against MICROSOFT set 
Feb. 4 as the start of a 120-day 
countdown for Microsoft to in- 
clude Sun’s version of Java with 
Windows XP. . . . CISCO filed a 
lawsuit charging Chinese vendor 
HUAWEI TECHNOLOGIES CO. with 
unlawfully copying its internet- 
working software. 


NEWS 


MARK HALL ® ON THE MARK 


Wintel Advocate Frets 
That High-Iech Duo... 


... could hamper U.S. dominance in high-performance computing in 
the future. Coming from a RISC/Unix bigot, such concerns might be 
little more than sour grapes. But when uttered by David Lifka, CTO at 
the Cornell Theory Center (CTC) in Ithaca, N-Y., they carry much 
more weight. Lifka designs supercomputing-class systems for 1,200 Cornell 
University scientific researchers, scheduling more than 100 CPU-intensive 
programs that run only on Wintel systems from Dell and Unisys. Per- 


formance, reliability and cost are far bet- 
ter than anything from the RISC/Unix 
camp, he claims. Seven years ago, when 
Lifka arrived at CTC, the Wintel advan- 
tage was simply in cost or in 
the slippery metric of price/ 
performance. That has all 
changed. “Right now, we’re 
getting better performance, 
period, at a fraction of the 
cost,” he says. Porting exist- 
ing superconiputing applica- 
tions to Windows was also a 
snap. The biggest, with 30 
million lines of code, took 

a mere month to migrate. 
Moreover, users rave about 
the ease of use of Windows 
tools. The researchers like 
the fact that “they don’t have 
to do computer science to do 
their own work.” So, what’s to 
gripe about? Lifka worries 
that the advent of “high-per- 
formance computing for the 
masses” combined with to- 
day’s sour economy means 
“users are not focusing on inno- 
vation.” Although Lifka has 
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nothing but praise for Intel’s Itanium 2 
processor, “you don’t want to have only 
one hardware vendor in town,” he ar- 
gues. “No single vendor can do it by 
themselves.” Competition 
among supercomputer ven- 
dors brought countless ben- 
efits to commercial users 
with advances in the areas of 
multiprocessing, job sched- 
uling, data analytics and oth- 
ers. If that competition evap- 
orates, Lifka rightly wonders 
whether the advantages high 
technology gives U.S. busi- 
ness and science will disap- 
pear with it. = Luckily, compe- 
tition is rampant in the storage- 
area network (SAN) manage- 
ment market, and that’s lead- 
ing to more feature-rich 
products. For example, Mc- 
Data Corp. in Broomfield, 
Colo., this week will unveil 
SANavigator 3.5 with signifi- 
cant advances in device 
management. One that 
should catch your eye is the 
software’s ability to discover 


eed 
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and monitor performance of IP gateways 
to Fibre Channel SANs. And in a release 
of SANavigator later this year, you'll get 
even more refined management of IP de- 
vices, such as oversight of an IP gate- 
way’s assignment to a Logical Unit Num- 
ber within your SAN. ® Speaking of IP 
management, on Feb. 17, SecureLogix 
Corp. in San Antonio will demo at Voice- 
Con2003 in Washington a prerelease ver- 
sion of its Enterprise Telephony Manage- 
ment Tele Wall security firewall for VOIP 
traffic going outside the campus to an IP 
voice trunk. Although most companies 
today use a gateway to translate VOIP 
data to a standard telephony time divi- 
sion multiplexer format, company Presi- 
dent Lee Sutterfield thinks the day will 
come when VOIP networks become 
widespread, with security a bigger issue. 
= The Web analytics market, already 
chock-a-block with vendors, will get even 
more competitive late next week when Sun- 
nyvale, Calif.-based start-up ClickTracks 
Inc. releases its ClickTracks Analyzer. 
CEO John Marshall acknowledges that 
“it’s a crazy time to start a company ina 
highly competitive market.” But he thinks 
users will sit up and take notice of at 
least two advantages his software has. 
First, price. At $495, he expects marketing 
directors will skip a couple three-martini 
lunches just to play with the PC-based 
product that slurps data from any Web 
log and cranks out graphical views of 
Web site visitor behavior. Besides being 
cheap, the software answers questions 
that keep e-commerce gurus up at night. 
Such as, Are those terms you pay Google 
and Yahoo a small fortune for as success- 
ful as unpaid terms that bring visitors to 
your site? For IT managers who don’t 
want marketing mavens downloading 
Web logs sober or otherwise, an enter- 
prise version with central management 
features can be had for $1,495. B 





BMC Plays Catch-up on 
Network Fault Detection 


BY MATT HAMBLEN 
BMC Software Inc. today 
plans to announce the addi- 
tion of fault management ca- 
pabilities to its network per- 


| formance monitoring tool, a 


move that’s intended to close a 
functionality gap between the 
company and rival vendors. 
Houston-based BMC said 
the addition of the new com- 
ponent won't result in a price 
increase on its Patrol Visualis 
software, which became avail- 





able early last year and has a 
starting price of $40,000. 
Gerry Roy, director of prod- 
uct management at BMC, ac- 
knowledged that the combined 


| ability to provide users with 


performance data and to iden- 
tify network faults and failures 
follows an industry trend. But 
the BMC feature is unique be- 
cause it pairs the two offerings 
within a single graphical user 
interface, he claimed. 

Canada Life Assurance Co. 





has tested BMC’s Fault Man- 
ager tool and is considering 
using it to assist its help desk 
workers in spotting network 
problems, said Arkadi Chekht- 
man, a network specialist at 
the Toronto-based insurer. 

“If somebody was looking 
from time to time at a network 
map, they could see a node 
change color if it goes down 
and see what other compo- 
nents it’s related to and then 
inform people in the business 
unit,” Chekhtman said. “There 
are tons of fault management 
tools, but I haven’t seen one 
with the network map and 
fault management linked.” 





Analyst Jean-Pierre Garbani 
at Giga Information Group 
Inc. in Cambridge, Mass., said 
BMC’s announcement initially 
was expected last year, “but 
better late than never.” 

BMC needs to offer both 
fault and performance man- 
agement capabilities in order 
to win new customers for Pa- 
trol Visualis, Garbani said. He 
added that the rollout means 
that each of the top four net- 
work and systems manage- 
ment vendors — BMC, Com- 
puter Associates International 
Inc., Hewlett-Packard Co. and 
IBM’s Tivoli Software unit — 
now provide the two features. B 
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HP Plans SAN-Level 


Storage Virtuali 


New software, switches aim to unify 
disk space across storage networks 





BY LUCAS MEARIAN 
N ONE of the first at- 
tempts by a top IT ven- 
dor to support network- 
based storage virtualiza- 
tion, Hewlett-Packard Co. last 
week announced plans to use 
new software to let IT admin- 
istrators manage all of the disk 
space on storage-area net- 
works (SAN) as a single entity. 
HP said that it plans later 
this year to make its VersaStor 
storage virtualization software 
available on a new class of 
SAN switches that San Jose- 
based Brocade Communica- 
tions Systems Inc. will acquire 
through its proposed buyout | 
of Rhapsody Networks Inc. in 
Fremont, Calif. VersaStor will | 





also be integrated into HP’s 
OpenView Continuous Access 
Storage Appliance (CASA), a 
bundled set of hardware and 
software that handles data mi- 
gration and replication. 
VersaStor will extend the 
reach of CASA to the network 
level, where the appliance will 
work with Brocade’s switches 
to coordinate SAN operations 
and to make the various arrays 
and server-level storage de- 
vices attached to a network 
look like one big pool of stor- 
age space, HP said (see box). 
Virtualization has become 


| the cornerstone of efforts to 


develop more automated stor- 


| age infrastructures. Currently, 


most vendors support server- 





zation 


or array-based virtualization, 
where the software is installed 
on a single device. Network- 
based virtualization promises 
to allow disk storage devices 
across an entire SAN to be 
centrally managed and provi- 
sioned. 

For Rick Allen, director of 
IT operations at Gwinnett 
Health System in Lawrence- 
ville, Ga., network virtualiza- 
tion offers the potential to si- 
multaneously send real-time 
copies of data from different 
disk arrays to an off-site data 
center. That capability “makes 
the whole disaster recovery 
scenario a lot easier,” said 
Allen, whose organization 
owns HP servers and storage 
devices plus equipment from 
IBM and Dell Computer Corp. 

The network approach 





would also provide users with 


TECHNOLOGY DETAILS 


The network-based storage vir- 
tualization approach planned by 
HP will work like this: 

1) HP’s CASA storage appliance 
tailing where data from different 
servers is stored on a SAN. 


2) The appliance will load the 
tables into Brocade’s switch, 

which will direct the process of 
sending data to the right arrays. 


3) The switch will sit between 
the SAN infrastructure and in- 
dividual storage devices, mak- 
ing them look like one large pool 
of disk space. 


4) The CASA appliance will also 


manage replication of data to 
backup storage devices. 


a single point of management 
for SAN-based storage, Allen 
added. “You're not having to 
virtualize at the machine lev- 
el,” he said. 

The combined HP/Brocade 
product offering is the first in- 
carnation of network-based 
virtualization from a major IT 


Minerals Firm Unearths Remote iNotes Access 


Imerys’ woes | 
solved by plug-in | 
BY TODD R. WEISS | 
Dave Bailey went to the Lo- 
tusphere 2002 conference 

when he needed information | 
on how to deploy IBM’s new 
Lotus iNotes Web Access soft- | 
ware to 3,000 global users. | 

This week at Lo- 
tusphere 2003 in 
Orlando, Bailey, a 
senior consultant for global IT | 
at Paris-based minerals supply 
company Imerys, aims to gath- 
er more information to facili- 
ate his pending first-quarter 
deployment. 

Bailey, who is based in 
Roswell, Ga., said last year’s 
show provided several ideas 
for accessing iNotes using a 
reverse proxy server setup. He 
said he tried setting up iNotes 
with three different recom- 
mended proxy servers from 
Sun Microsystems Inc., Micro- 
soft Corp. and IBM. But Bailey 





Ci 


said none could be configured 
properly for his systems. 
Bailey said he achieved the 
goal of giving his corporate 
users secure access to their 
e-mail via iNotes with a prod- 
uct from Whale Communica- 


| tions Ltd. in Fort Lee, NJ. 


Whale’s product, the e-Gap 
Remote Access Appliance, is a 
plug-in device that Bailey said 
met his reverse- 
proxy require- 
ments, creating a 
protective security layer be- 
tween his remote users and 
the company’s Internet infra- 
structure. Pricing for the de- 
vices, which are essentially 
Secure Sockets Layer/virtual 
private network (VPN) appli- 
ances, begins at $23,000. 

Richard Stiennon, an analyst 
at Gartner Inc. in Stamford, 
Conn., said Whale has been 
gaining attention recently be- 
cause its appliances enable 
secure e-mail access through a 
Web site, while removing the 
need for an individual VPN. 





“Whale’s been having tremen- | 
dous success in that market 
space,” Stiennon said. 

Whale will be one of about | 
150 exhibitors at this year’s 
Lotusphere, where keynote 
speakers will include former | 


New York Mayor Rudolph 
Giuliani. The show’s themes 
will go beyond Lotus to cover 
IBM WebSphere, DB2, Tivoli 
and hardware offerings. Lotu- 
sphere will go on for at least 
another five years, IBM said. D 


Shippers Face Automation 
Task for Customs Deadline 


BY LINDA ROSENCRANCE 
Shippers and ocean carriers 
are scrambling to automate 
their systems to meet a Feb. 2 
deadline for compliance with 
a new U.S. Customs Service 
regulation. 

The Advance Manifest Reg- 
ulation, also known as the “24- 
hour rule,” requires shippers 
and ocean carriers that bring 
goods into the U.S. to electron- 
ically submit complete con- 
tainer-manifest information to 
Customs through its Automat- 
ed Manifest System (AMS) 24 





hours before the container is 
loaded onto a vessel. 

John Gurrad, vice president 
of business planning and 
e-commerce at MOL America 
Inc., a carrier in Concord, 
Calif., said a portal for the 
ocean transportation industry 
such as GTN, which is operat- 
ed by GT Nexus Inc. in 
Alameda, Calif., can help ship- 
pers, forwarders and carriers 
comply with the 24-hour rule. 

GT Nexus President John 
Urban said GTN automates 
and standardizes transactions 
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vendor, said Randy Kerns, an 
analyst at Evaluator Group 
Inc., a market research firm in 


| Englewood, Colo. “Before, it 


was all small, independent 
companies with their own so- 
lutions,” Kerns said. 

However, a spokeswoman 
for Sun Microsystems Inc. said 
the company plans to ship vir- 
tualization software as part of 
its Nl resource-management 
technology initiative next 
quarter — ahead of HP’s plan 
to release its technology dur- 
ing the second half of the year. 


Pooled Storage 
Sun’s offering will include 
software that it bought as part 
of its acquisition of Acton, 
Mass.-based Pirus Networks 
Inc. in November, the spokes- 
woman said. The Pirus tech- 
nology lets IT managers pool 
storage from a variety of 
servers, including ones run- 
ning Sun’s Solaris operating 
system, other Unix releases, 
Linux and Windows. 
VersaStor has been in beta 
testing for two and a half years 
and came to HP through its 
acquisition of Compaq Com- 
puter Corp. Testing of the 
software with CASA and Bro- 
cade’s switches is expected to 
start in the summer, HP said. 
Brocade has yet to complete 
its buyout of Rhapsody, which 
was agreed to in November. 
But the two companies said 
the deal could be finalized by 
the end of this month. D 


among shippers, forwarders 
and their ocean carriers. He 
said online tools already avail- 
able at the GTN portal allow 
them to prepare and transmit 
key shipping documents. The 
GTN platform is integrated 
with the back-office systems 
of a host of carriers, he added. 

Jack Maynard, an analyst at 
Boston-based Aberdeen 
Group Inc., said employing 
technologies such as GTN will 
be key to achieving compli- 
ance with the new regulations. 
The value of GTN, he said, is 
that it provides shippers with 
an electronic transaction plat- 
form that quickly sends infor- 
mation to their carriers, there- 
by reducing delays. B 
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Big Outsourcing Shift 
Predicted for 


Some IT managers don’t foresee major 
workforce changes at their companies 





BY THOMAS HOFFMAN 
NEW report on the 
IT labor market pre- 
dicts that 35% to 
45% of full-time IT 
jobs in the U.S. and Canada 
will be shifted to contractors, 
consultants, offshore 
technicians or part- 
time workers by 
2005. And some analysts and 
IT labor experts said those fig- 
ures, although eye-popping, 
may not be far-fetched. 

However, four high-level IT 
managers said the predictions 
made in the report issued last 
week by New Canaan, Conn.- 
based Foote Partners LLC 
probably won't apply to their 
companies. For them, out- 
sourcing hasn’t proved to be a 
lower-cost alternative to keep- 
ing IT inside corporate walis. 

“While there are times 
where I'd love to throw some- 
thing to the outsourced den, 
so far we’ve found that it 
wouldn’t be cost-effective for 
us,” said Amy Courter, vice 
president of IT at Valassis 
Communications Inc., a Livo- 
nia, Mich.-based marketing 
services firm. 

“We do everything in- 
house,” noted John Studdard, 
senior vice president and chief 
technology officer at Lydian 
Trust Co., a financial services 
firm in Palm Beach Gardens, 
Fla. “The reason we’ve been 
successful in light of 9/11 and 
the economy and the bursting 
of the dot-com bubble is that 
we're in control of our own 
destiny and not locked into 
long-term contracts that may 
or may not be relevant to our 
business anymore.” 

Nevertheless, David Foote, 
president and chief research 
officer at Foote Partners and a 
Computerworld columnist, 
said American companies 
“can’t afford to do application 
development in the U.S. any- 





more. The nature of the busi- 
ness has changed.” 

IT job sharing will also play 
a role in reducing full-time po- 
sitions, Foote said. He based his 
estimates on surveys his com- 
pany conducted last year with 
1,880 private-sector 
and government em- 
ployers, which were 
asked what percentage of their 
future IT workforces will be 
in-house vs. external. 

Foote’s timeline for such a 
massive workforce shift “is a 
little aggressive,” said Maria 
Schafer, an analyst at Meta 


Jobs 


Group Inc. in Stamford, Conn. 
“It will be after 2006 before 
we get to that point.” Schafer 
added that she still thinks ap- 
plication development and 
Web design are growth areas 
for IT workers in the U.S. 


Cheaper Labor Overseas 
But the shift of technical work 
to offshore operations by 
many companies “doesn’t 
bode well” for American IT 
workers, Schafer said. The 
cost of some types of IT work 
is 20% to 50% less in places 
such as India, Eastern Europe 
and parts of South America, 
she said. 

Although Foote’s prediction 





‘Corporate IM Software 


Makers Eye Wall Street 


BY LUCAS MEARIAN 

The adoption of instant mes- 
saging (IM) software by finan- 
cial services firms mostly in- 
volves end users communicat- 
ing via consumer-oriented 
products, often unbeknownst 
to IT managers. But vendors 
of enterprise-class IM prod- 
ucts are trying to change that. 

For example, Reuters Group 
PLC this month said more 
than 225,000 financial services 
workers worldwide, including 
80,000 in the U.S., have signed 
up for the Reuters Messaging 
technology it launched in Oc- 
tober. London-based Reuters 
collaborated with Microsoft 
Corp. to develop what is es- 
sentially the first version of 
the software vendor’s upcom- 
ing corporate IM application, 
which is due out in June. 

IBM wouldn’t disclose end- 
user totals in the financial ser- 
vices industry for its more 
established Lotus Sametime 
software. But Jeremy Dies, a 
manager of collaboration of- 
ferings in IBM’s Lotus Soft- 


| ware Group, said eight of the 
top 10 commercial banks 
worldwide use Sametime. 

IM is attractive to banks 
and brokerages because it can 
streamline both internal and 
external communications. But 
analysts and IT managers said 
uncontrolled use of the tech- 
nology could open up firms 
to computer viruses and to 
regulatory actions by govern- 
ment agencies, which require 
that electronic communica- 


Instant Upgrade 











“sounds radical now, it’s not 
too far off the mark,” said 
Jeremy Grigg, a New York- 
based analyst at Gartner Inc. 
“You've got this wholesale 
rush to the door for external, 
offshore services.” 

But William Finefield, CIO 
at the Navy Exchange Service 
Command in Virginia Beach, 
Va., said he doesn’t foresee 
any rush to outsourcing at his 
organization. “Our experience 
has been that it costs us more 
to go outside [for IT services] 
than it does internally,” he said. 

A previous outsourcing deal 
left a bad taste in the mouth of 
Steve Hammond, vice presi- 
dent of information services at 
Plasti-Line Inc. in Knoxville, 
Tenn. Nine years ago, Plasti- 
Line outsourced its IT opera- 
tions to what is now Accen- 
ture Ltd. But after running 
into problems with the con- 
tract, Plasti-Line opted not to 
renew the five-year agreement 


tions be logged and stored. 
Products such as Sametime 
and Reuters Messaging include 
functionality that’s designed 
to meet firms’ security and 
regulatory compliance needs. 
The three top vendors of con- 
sumer IM products — America 
Online Inc., Microsoft and Ya- 
hoo Inc. — announced ver- 
sions of their software aimed 
at corporate users last fall. 


Seeking Security 

Wells Fargo & Co. last year 
rolled out a set of Web chat 
and collaboration tools for its 
customers. Jim Smith, senior 
vice president of consumer 
Internet services at the San 
Francisco-based company, said 
Wells Fargo is now consider- 
ing the purchase of an enter- 
prise-class IM product in or- 
der to support one-to-one 
communications internally 
and with its customers. 

Jim Lenz, senior vice presi- 
dent and co-manager of trad- 
ing at Bridge Trading Co. in St. 
Louis, said the Reuters-owned 
brokerage began beta-testing 
Reuters Messaging last sum- 
mer as part of an effort to cut 
down on the use of unautho- 
rized IM tools internally and 
at the banks and clearinghous- 
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i, We’ve looked 
at [outsourc- 
ing] and haven't seen 
the financial returns. 


Pee eeerereseecesesseceesseesees 


STEVE HAMMOND, VICE PRESIDENT 
OF INFORMATION SERVICES, 
PLASTI-LINE INC. 


and began moving workers 
back in-house, Hammond said. 
“We do ramp up and down 
on resources with contrac- 
tors,” he said. “But as far as 
flat-out outsourcing, we’ve 
looked at that and haven't 
seen the financial returns.” 
Foote and Grigg said IT 
workers facing displacement 
should retrain themselves in 
project management or tech- 
nologies such as IT security 
and wireless networking — 
suggestions that map with the 
advice of panelists at an out- 
sourcing conference in Sep- 
tember [QuickLink 33217]. DB 


es with which it does business. 
“We heard from a lot of [users] 
that they needed something 
secure because more and 
more people were using AOL 
or Yahoo or something that 
wasn’t secure,” Lenz said. 

But the use of consumer- 
grade IM software in the in- 
dustry remains widespread, 
analysts said. For example, in a 
survey of financial services 
firms last fall by Osterman Re- 
search Inc. in Black Diamond, 
Wash., respondents said that 
about half of their end users 
had downloaded more than 
one consumer IM product. 

In October, seven top firms 
formed the Financial Services 
Instant Messaging Association 
(FIMA) to push vendors to de- 
velop IM standards. But Ursu- 
la Mills, co-chairman of FIMA, 
said she doesn’t expect the use 
of consumer-oriented services 
to stop anytime soon. 

“Many of the customers are 
wanting to use the product of 
their choice,” Mills said. “If 
that’s AOL, Yahoo or MSN 
Messenger, then that’s the 
product we want to use.” D 


MORE THIS ISSUE 


Archiving e-mail has become serious 
business for IT managers. Page 33 
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Some Oracle Users Report Success With Ti 


Despite rollout 
problems, they say 
apps are paying off 


BY MARC L. SONGINI 
SAN DIEGO 
Oracle Corp.'s oft-repeated 
promise that its business ap- 
plications can help users slash 
costs and boost operational 
efficiency is finally starting to 
strike home with some com- 
panies that have installed its 
E-Business Suite lli software. 
Early rollouts of the lli ap- 
plications were often prob- 
lematic, and Oracle had trou- 
ble persuading many of its ex- 
isting users to upgrade. But at 
the company’s AppsWorld 
conference here last week, 
eight users said their Lli instal- 
lations have improved internal 
business processes and, in 
some cases, are providing re- 
turns on their investments. 
Building on earlier promises 
to make installation of the 
software less complex, Oracle 
CEO Larry Ellison said during 
his keynote speech that the 
company is working to give 
users a firm idea of lli costs 
upfront. “One thing we fo- 








cused on is reducing the cost 
of the implementation and 
trying to make it predictable 
[so we can] tell you before we 
begin how much it will cost to 
run it every day,” Ellison said. 
Joshua Greenbaum, an ana- 
lyst at Enterprise Applications 
Consulting in Daly City, Calif., 
said Ellison’s vow marks a 
change for Oracle — and po- 
tentially for its rivals. “Provid- 
ing complete total-cost-of- 
ownership [numbers] for all 


Deal Moves Microsoft Into 
Web Conferencing Market 


BY CAROL SLIWA 

Microsoft Corp. last week ex- 
tended its reach into the on- 
line conferencing and collabo- 
ration arena with the acquisi- 
tion of privately held Place- 
Ware Inc. 

Charles Zaragoza, a lead 
product manager in Micro- 
soft’s information worker 
product management group, 
said the company began talking 
to Mountain View, Calif.-based 
PlaceWare upon realizing that 
Microsoft didn’t have the “se- 
cure, reliable, extensible” Web 
conferencing services its cus- 
tomers said they needed. 

Financial details weren’t 
disclosed. 

Zaragoza said that although 
Microsoft’s NetMeeting and 


| 
| 





other offerings were a good 
start, customers “are getting 
smarter about what they need.” 
The PlaceWare services en- 
able users to conduct real- 
time interactive presentations 
and meetings over the Inter- 
net via any PC and Web brows- 
er, according to Jennifer Calli- 
son, a senior director of mar- 
keting at Place Ware. 


Playing Catch-up 

In a report issued last week, 
analysts at Stamford, Conn.- 
based Meta Group Inc. said 
Microsoft has made a concert- 
ed effort in the past year to 
catch longtime collaboration 
market leader IBM, but its 
most recent efforts with Share- 
Point Team Services and Win- 





new deals will be hard to do, 
but it’s doable,” Greenbaum 
said. “And I think it’s going to 
be an important competitive 
advantage that will force other 
vendors into promoting better 
understanding of the lifetime 
costs of their software.” 

Hosted versions of Oracle’s 
call center, finance and other 
applications saved United As- 
set Coverage Inc. (UAC) more 
than $3 million during the first 
12 months it used the software, 
said Brad Snook, vice presi- 
dent of client relationship 
management at the Naperville, 
Ill.-based telecommunications 
services provider. 

Before going live with lli 
in August 2001, UAC rana 
hodgepodge of business appli- 
cations. Oracle’s software gave 
the company an integrated set 
of contract, billing and custo- 


| mer relationship management 
software that made it possible 


for individual call center work- 
ers to handle more inquiries, 
Snook said. “We made up what 
we spent in about a year,” he 
noted. 
ViewSonic Corp. also has 

seen a payback on its invest- 
ment in lli, according to CIO 


dows Server 2003 instant mes- 
saging have yet to bear fruit. 
Microsoft’s Web conferenc- 


ing efforts “seemed mori- 


bund” after unsuccessful runs 


| with its peer-based NetMeet- 


ing and immature Exchange 
2000 Conferencing Server, the 
Meta report said. 

Rob Enderle, an analyst at 
Giga Information Group Inc. 
in Cambridge, Mass., said Mi- 
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Robert Moon. But it took the 
Walnut, Calif.-based maker of 
computer monitors, projectors 
and other technology prod- 
ucts two attempts to install 
Oracle’s software before it 
succeeded. 

Four years ago, ViewSonic 
tried to roll out a heavily cus- 
tomized version of Oracle’s 
Release 10.7 applications. But 
that project lacked end-user 
participation and produced 
faulty data, Moon said. “It was 
a mess,” he noted. “We were 
running a $1 billion business 
on Excel spreadsheets.” 


ViewSonic scrapped the 10.7 | 


system and tried again, this 
time using lli. The company 
went live with the software in 
November 2001 after a five- 
month installation. Since then, 
ViewSonic has consolidated 
its servers and seen a reduc- 
tion in its hardware support 
costs, saving about $2.5 mil- 
lion annually, Moon said. D 


FEDERAL FUNDS 


The Bush administration's IT budget chief 
talked about the government's technology 
spending plans at AppsWorid: 


QuickLink 35786 
www.computerworld.com 


crosoft’s NetMeeting “runs 
out of steam” after six people 
join a conference. He said that 
although Microsoft hasn’t been 


| a major player in collabora- 


tion, “that’s going to change 
pretty quick now.” 

Competitors in online con- 
ferencing, such as WebEx 
Communications Inc., whose 
stock price fell following news 
of the Microsoft acquisition, 
will find themselves “in for a 
fight,” Enderle said. 

The acquisition is expected 
to be completed this quarter. 
Plans call for Place Ware to be 
incorporated into Microsoft’s 
newly created Real Time Col- 
laboration Group, which will 
be headed by Anoop Gupta. 
Gupta worked in Microsoft’s 
research division for five years 
and recently served as techni- 
cal adviser to Chairman and 
Chief Software Architect Bill 
Gates. D 


1 





Added 
For Older Apps 


At AppsWorld, Oracle detailed 
several initiatives that company 
executives hope will entice new 
users into the tli fold. But the 
software vendor also made an- 
other concession to customers 
that are still running its older 10.7 
software. 

Oracle was scheduled to end 
its support for that release in 
dune. But Mark Jarvis, Oracle's 
chief marketing officer, said 10.7 
users will still be able to get ac- 
cess to some support services 
after the deadline. “We're not 
solving new bugs, but all infor- 


ware, and it will also help 10.7 
users plan migrations to Ti. 

The ending of support for 
10.7 has been a bone of con- 
tention between Oracle and its 
users since 1999. The company 
initially wanted to stop at the 
end of 2000, but it made a se- 
ties of extensions in response to 
complaints from users who said 
they weren't ready to upgrade. 
Even now, according to Oracle, 
more than 20% of its applica- 
tion users haven't started migrat- 
ing to Thi. 

As expected, Oracle used 
AppsWorld to showcase a new 
line of bundied applications and 
consulting services designed to 
help users install specific Ti ap- 
plications more quickly (Quick- 
Link 35688]. 

Oracle also announced that it 
will offer Tli via a hosted sub- 
scription service priced at about 
$5,000 per month. The service 
is aimed primarily at companies 
with up to 25 end users and an- 
nual revenues of up to $25 mil- 
lion, Jarvis said. He added that 
Oracle won't customize the soft- 
ware for individual users. 

- Marc L. Songini 
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CA Loses Money. 
But Sales Increase 


Computer Associates Interna- 
tional Inc. reported a net loss of 
$44 million on revenue of $778 
million for its third quarter, 
which ended Dec. 31. That com- 
pares with a $231 million loss 
and $747 million in revenue dur- 
ing the same period a year ear- 
lier. CA also said federal officials 
have asked for copies of its con- 
tracts with 10 customers as part 
of an investigation into the com- 
pany's accounting practices. 


C&W Sets Plan 
To Replace CEO 


London-based Cable & Wireless 
PLC (C&W) announced that CEO 
Graham Wallace will leave the 
company as soon as a replace- 
ment is found. For now, though, 
Wallace will remain in charge 

of day-to-day operations and 
C&W’s cost-cutting efforts. The 
plan to seek a new CEO follows 
a November decision by C&W to 
largely withdraw from the U.S. 
Web hosting market. 


Peregrine Submits 
Bankruptcy Plan 


Peregrine Systems Inc., a San 
Diego-based vendor of asset 
management software, submitted 
a Chapter 11 reorganization plan 
to the U.S. Bankruptcy Court in 
Delaware. Peregrine said the 
plan seeks to maintain the com- 
pany as an ongoing business in- 
stead of liquidating its assets. 
However, Peregrine added that 
a committee of its unsecured 
creditors opposes the proposal. 


Rational Holders 
Approve IBM Deal 


Rational Software Corp. in Cu- 
pertino, Calif., said its stockhold- 
ers approved the $2.1 billion 
acquisition deal that the applica- 
tion development tool vendor 
signed with IBM last month. 
IBM’s purchase of Rational is 
due to be completed this quarter. | 





Continued from page 1 
Fujitsu — 


the Linux business is a wel- 
come one, said Joe Beery, CIO 


| at America West Airlines Inc. 


in Phoenix. “We had hoped 


| that Fujitsu would do some- 


thing like this,” he said. 

America West uses two of 
Fujitsu’s 64-processor servers 
running Sun’s Solaris operat- 
ing system to power a variety 
of applications, including its 
core revenue management 
system. But, Beery said, “we 
are very interested in more 
cost-effective solutions.” 

The airline has already set 
some initial plans for using 
Linux, he added. For example, 
America West plans to switch 
its corporate portal Web site 


| from Windows NT to Linux 


next month. As the open- 
source operating system be- 
comes more reliable and the 
application development tools 
that support it mature, the 


| Continued from page 1 


Unilever 


far, the company has no cost- 


| savings numbers to release, 


but anecdotal evidence is bol- 
stering its expectations, Hope- 


| Murray said. 


“We've got an awful lot of 
proof points,” he said, includ- 
ing firewall servers that run 
three times faster under Lin- 
ux, with cost savings of up to 
40%. “Every time we put in 
Linux, we are amazed and sur- 
prised at its speed and the re- 


liability with which we can 
| o. 
| run it. 


He said Unilever expects to 
benefit from the expected re- 


| lease later this year of the Lin- 


ux 2.6 kernel, which will intro- 
duce features that offer the 
tools needed for the transition, 
including real-time threading 
and improved journaling. 

Unilever is making its move 
in a very vocal way to encour- 
age independent software ven- 
dors to develop needed enter- 
prise business applications for 
Linux, Hope-Murray said. 

“Tt’s not really a leap of 
faith,” he said, noting that Uni- 








NEWS 


| company will likely migrate 


some of its more business- 
critical applications over from 
Solaris, Beery said. 

Fujitsu’s move is a sign of 
the growing interest in Linux 
within corporate IT depart- 
ments, said Charles King, an 
analyst at The Sageza Group 
Inc. in Mountain View, Calif. 
“This is a resounding pat on 
the back for Linux,” he said. 


Linux Push 
Fujitsu joins a list of server 
vendors, including IBM and 
Hewlett-Packard Co., that are 
aggressively pushing Linux for 
use in enterprise applications. 
“If you take a look at some of 
these announcements, the 
claims of some vendors that 
Linux is not ready for the en- 
terprise qualifies as whistling 
past the graveyard,” King said. 
Jack Hirano, a deputy gener- 
al manager at Fujitsu in New 
York, said the company also 
plans to use Intel’s Xeon proc- 
essors in its Linux servers. He 


lever’s two largest IT suppli- 


| ers, HP and IBM, are commit- 


ted to Linux and are ready to 
help with the project. “If our 
partners weren’t committed to 
it, we wouldn’t be doing it.” 

Getting an OK from top 
executives to commit to the 
strategy took time. “It wasn’t 
overnight,” Hope-Murray said. 
“If it wasn’t for the twin sup- 
port [from IBM and HP], we 
probably wouldn’t have gotten 
the buy-in.” 

The company hopes to con- 
duct internal testing with Lin- 
ux versions based on the up- 
coming kernel by the end of 


| this year. It’s also applying for 


membership in the nonprofit 
Open Source Development 
Lab Inc. in Beaverton, Ore., 





added that Fujitsu, which 
makes its own SPARC chips, 
will continue to develop new 
Unix systems. But the Linux 
machines will broaden the 
company’s enterprise server 
portfolio, according to Hirano. 
“We see a strong opportunity 
in the Linux marketplace, and 
we're confident that we can 
capitalize on it,” he said. 

Hirano said Fujitsu plans to 
deliver the same reliability, 
availability and scalability fea- 
tures on the Linux boxes that 
it does for its Unix 
servers. To that 
end, the company 
has created a 300- 
employee Linux 
systems group that 
will focus on port- 
ing its interconnect, cluster- 
ing, systems management and 
grid-computing technologies 
to Linux. 

Fujitsu, which has a large 
presence in Japan and Europe, 
isn’t a big player in the U.S. 
server market. But it has been 


which was created to encour- 
age the development of enter- 
prise data center and telecom- 
munications applications for 
Linux. Unilever would be the 
first private company to join 
the group. 

Desktops throughout Uni- 
lever will remain Windows- 
based, Hope-Murray said, 
though the company will moni- 
tor the possibility of switching 
those to Linux in the future. 

He said he has been seeking 
alternatives to the company’s 
infrastructure of three operat- 
ing systems for more than a 
decade. In the early 1990s, the 
Open Systems Foundation, 
which promised a platform- 
independent Unix, tried but 
failed to provide the operating 


| Unileveraging Linux 


Over the next eight to 10 years, Unilever will move its server infra- 
structure from three versions of Unix to Linux. Its plans include: 


= Pushing CRM and ERP vendors to build their applications to support 


Linux in large enterprises. 


1 Joining the Open Source Development Lab to encourage high-end _ 
development. 


Linux application 


. Testing the now Linux 2.6 kernel io ensue increased exit. 
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trying to expand its position 
here by using aggressive pric- 
ing to lure Unix users away 
from Sun’s hardware, said 
Rich Partridge, an analyst at 
D.H. Brown Associates Inc. in 
Port Chester, N.Y. 

He added that last week’s 
announcement is a recogni- 
tion by Fujitsu “that you just 
can’t ignore Linux.” Fujitsu ex- 
ecutives are betting that they 
“can leverage the design of 
their big boxes and plop ina 
different chip,” Partridge said. 
“Tt sounds like a 


SPOTLIGHT ON LINUX smart reuse of 


For more coverage, head to 
our Linux News & Features page: 
@ QuickLink s1000 
www.computerworld.com 

yp 


their technology.’ 

The Linux 
server plans sig- 
nificantly expand 
Fujitsu’s relation- 
ship with Intel. Fujitsu Sie- 
mens Computers, a Cologne, 
Germany-based joint venture 
with Siemens AG, sells a line 
of lower-end Intel servers. 
But these will be Fujitsu’s first 
high-end servers based on 
Intel processors. D 


system he needed, he said. 

Now, with the integration of 
the 2.6 kernel, Linux will have 
the maturity needed to handle 
Unilever’s heavy-duty data- 
base, customer relationship 
management and enterprise 
resource planning applica- 
tions, Hope-Murray said. 
Unilever officials declined 
to identify their database, 
CRM or ERP vendors. 

Analysts said the confi- 
dence Unilever has in Linux 
has shown up elsewhere. 

“That’s consistent with oth- 
er companies I’ve talked to in 
the financial industry,” said 
George Weiss, an analyst at 
Stamford, Conn.-based Gart- 
ner Inc. “They’re saying [Lin- 
ux] will be fixed and firm in 
the future, and they want to be 
part of the wave.” 

Bill Claybrook, an analyst at 
Aberdeen Group Inc. in Bos- 
ton, said Unilever benefits 
from having an extensive his- 
tory with Unix, the model for 
Linux, and from having part- 
ners such as IBM and HP. “If 
they buy the stuff from IBM 
and HP, there’s not really a big 
risk,” he said. “They’re going 
to get service and support.” D 
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HP Readies 


BY BOB BREWIN 
Hewlett-Packard Co. last week 
introduced a four-processor 
blade server, becoming the 
first major hardware vendor 
to detail plans to ship a blade 
device of that size. 

But corporate users will 
have to wait for nearly two 
months before they can buy 
the four-CPU system. Hugh 
Jenkins, vice president of 
marketing for HP’s industry 
standard server group, said 
the new ProLiant BL40p de- 
vice isn’t due to be available 
for ordering until mid-March. 

The BL40p will be based on 
Intel Corp.’s Xeon MP proces- 
sors and will include built-in 
connections to Fibre Channel 
storage-area networks (SAN), 
Jenkins said. He added that the 
SAN connectivity capabilities 
will let IT managers hook the 
blade server to large storage 
clusters for use in running 
corporate applications such as 
messaging or enterprise re- 
source planning systems. 

Blade servers pack the func- 
tionality of traditional rack- 
mounted systems onto a single 
high-density circuit board, re- 
ducing the amount of space 
that the hardware takes up in 
data centers. HP and other top 
server vendors last year began 
shipping blade devices with 
one or two CPUs. 


Behind a Start-up 


HP’s move to the four-proces- 
sor level comes 10 months af- 
ter Egenera Inc., a Marlboro, 
Mass.-based start-up, an- 
nounced a blade server that 
also includes four Xeon chips 
and built-in support for Fibre 
Channel SANs. 

Other vendors also have 
such systems in the works. 
IBM said it plans to introduce 
four-processor blade servers 
with SAN connections later 
this year. Dell Computer Corp. 
has four-CPU devices on its 
road map but declined to dis- 
close its delivery plans. 

CenterBeam Inc., an IT out- 
sourcing vendor in Santa 
Clara, Calif., uses HP’s exist- 
ing blade servers to hold mir- 
ror images of the applications 


Four-CPU Blade Server 





| “to scale both processing and | mid-March an upgrade of its 
| SAN [capabilities] to meet | two-processor BL20p model 
| whatever demands our clients with faster Xeon chips and the 
and files that it manages for | the company plans to evaluate | have,” Ricart said. | same SAN connectivity that’s 
customers. | the BL40p once it’s available. 

Glenn Ricart, CenterBeam’s The four-CPU device could | start at $8,999, Jenkins said. | vice. The new BL20p will start 
chief technology officer, said make it easier for CenterBeam | HP also plans to release by | at $3,399, Jenkins said. D 


Pricing on the BL40p will coming in the four-CPU de- 


Strength in Numbers. 


95% of surveyed 
customers would 
Taeelaaaeile| 
Remedy 


REMEDY 12 


SERVICE MANAGEMENT SOLUTIONS 


} Vela eam ore ladies 
who extend Remedy s 


1% to be certified as 4 : solutions globally 
ITIL-compatible 
by PinkVerify 


13,500 10,000,000 


Omar Room Er llalae) 


nm sers acre 
developers globally eet eee la 


7,000 customers globally 


Remedy is the leader in Service Management solutions. Our numbers speak for themselves. 


Yet, there are other numbers important to Remedy. Operating cost reductions, improvements in customer 
satisfaction, increased employee productivity, shorter time to value—the bottom-line numbers you will achieve 
by using Remedy’s out-of-box best practice applications to automate service management processes. 


Your success depends on those numbers. Remedy delivers them. 


Se Fy Ram e dy 








16 compurerworto January 27, 2003 


OPINION 


PATRICIA KEEFE 


Clear on the Concept 


C é ON’T IT ALWAYS SEEM TO GO 
that you don’t know what 
you've got till it’s gone?” Joni 
Mitchell’s refrain might explain 
the behavior of some vendors 


today. It’s interesting, isn’t it, how a dramatic drop 
in sales can achieve what reasonable complaints 
couldn’t — undivided attention and prompt action. 


Oracle, for example, 
struggled last year with 
declining business appli- 
cation revenue. New li- 
cense sales plunged in its 
last quarter, falling 34% 
worldwide and 50% in the 
Americas in year-over- 
year comparisons. This is 
bad news for the database 
giant, which is counting 
on its application busi- 
ness to help drive growth. 

So last week, Oracle er 
stepped up efforts to address user 
complaints by revamping its sales 
force and rolling out a suite of appli- 
cations designed so customers can 
quickly deploy pieces of its E-Busi- 
ness Suite Ili line. 

IBM got into the act by rolling out 
new hardware along with significant 
pricing changes and upgrade op- 
tions for its iSeries system cus- 
tomers two weeks ago. IBM hopes to 
revitalize sales of its 25-year-old 
midrange line by addressing long- 
standing user concerns and reignit- 
ing developer and reseller interest. 

Picking up where she left off at 
Comdex, HP CEO Carly Fiorina 
prattled on to a European audience 
about how it’s not the economy 
weighing down the IT market (It’s 
not?), but rather “changes in cus- 
tomer requirements that are here to 
stay.” Translated this means that 
suddenly sober customers now real- 
ize that, in Carly’s words, “it’s not 
the glamour of technology that is 
most important; it’s return on tech- 
nology that’s most important.” You 
don’t want hot boxes and killer apps 





anymore; why, you want 
to cut your technology 
costs and align with 
business requirements! 
(And where would IT 
have gotten the idea that 
it had to have the latest 
and greatest?) Possibly 
caught up in the excite- 
ment, an HP partner ac- 
tually suggested that 
customers have matured 
so much that “they really 
want to get the adver- 
tised benefits.” You didn’t want that 
before? 

What’s new isn’t that customers 
have suddenly woken up and started 
demanding technology that works, 
but rather that vendors are beginning 
to take those demands seriously. Of 
course, they don’t have any choice. 
Hardly anyone bought anything last 





year, and their earnings show it. 

Moreover, it has become clear that 
the hoped-for turnaround in 2003 
isn’t going to happen. And no matter 
how much vendors play up their 
sudden enthusiasm for the midsize 
and small business markets, the fact 
is, they’re pining for your business. 

Wendover Corp., a sales and mar- 
keting intelligence firm that regular- 
ly surveys the country’s largest com- 
panies on their budgeting and pur- 
chasing plans, puts it this way: Out 
of 14 million businesses in the U.S., 

9% have 5 employees or fewer, 
while 79% have 10 employees or 
fewer. One-half of 1% have between 
100 and 1,000. And only one-tenth of 
1% — that’s 14,000 businesses — 
have more than 1,000 employees. 
That’s you, and that’s where the 
money is. Do the math. 

What’s key is that big IT vendors 
are pitching 2003 as the year high- 
tech spending rebounds. And they 
now seem pretty clear on the con- 
cept that customers want their ROI, 
quickly. So, no matter how small 
that rebound, vendors seem extra 
determined to work for your busi- 
ness. Your business partners are lis- 
tening like never before, so speak 
out and take advantage of it while 
you can. D 
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MICHAEL GARTENBERG 


Three ‘Top 
Tech Choices 
For 2003 


F YOU DON’T already 

have them in the pipeline, 

here are three technolo- 
gies I’d advise pursuing in 
2003. They all add features 
and benefits that will help make your 
users more productive and let you and 
your team get some positive visibility 
inside the company. 

1. Corporate instant messaging: E-mail 
has become the lifeblood communica- 
tions for most organizations. But it’s 
not enough. Instant messaging is the 
logical next step in efficient enterprise 
communications. It lets managers 
work closely with direct reports and 
see who’s available in real time. IM- 
related problems, such as control of 
user names, security and the ability to 
archive messages, are 
all being addressed 
by the leading IM 
vendors. 2003 is a 
good time to evaluate 
and implement IM. 

2. Wi-Fi: The value 
of the connected vs. 
the disconnected 
user is no longer a 
debate. The impor- 
tance of staying con- 
nected is well under- 
stood, but users are 
often constrained by 
the physical limita- 
tions of their net- 
work links. Wireless 802.11x network 
products give users the freedom to be- 
come “corridor warriors” and remain 
productive even when away from their 
desks. 

When 802.11x is combined with 
hardware like Tablet PCs, users can re- 
main online even during meetings, 
work with remote colleagues and 
roam from location to location. While 
IT has to put many security policies in 
place, 802.11x networks can add tre- 
mendous value to most organizations. 

3. Streaming video: Do you think that 
streaming video means grainy clips 
the size of a postage stamp? ‘Think 
again. Streaming quality has never 
been higher, and the cost has never 
been lower. New technologies from 





Pimm Fox is on vacation. His column returns next week. 
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Microsoft, RealNetworks and Apple 
are near broadcast quality with rela- 
tively low bandwidth penalties. 

Streaming technologies can make it 
easy for executives to get a message 
out to employees or to address the 
outside world. Because of competitive 
bandwidth pricing, live events have 
begun to yield manageable economics 
for most companies. If your company 
hosts or televises live events, you can 
now make use of the Internet and 
streaming video to improve returns on 
these expenditures at dramatically 
lower costs. 

These technologies are probably in 
use inside your organization already. 
Users are more technically aware than 
ever before. They read the same trade 
magazines that we do and understand 
the benefits that technology can bring 
them. The result is they often can and 
will bypass IT. 

Now is the time to take the initiative 
and either seize control or cede con- 
trol to your users. Start your research 
and deploy early. D 


EMMET COLE 


Palladium 
Is Mythical 
Security 


CCORDING to legend, 

the Palladium was a 

sacred statue of Athena 
that the Trojans believed 


would protect them against 
the advancing Greek army. But when 
Odysseus sneaked into Troy and stole 
the Palladium, Troy did not fall. That 
happened only when the Greeks built 
the Trojan horse. 

Mysterious and somewhat unfortu- 
nate mythological precedents aside, 
serious questions are being asked of 
Microsoft’s forthcoming Palladium 
technology. Will Palladium fail to pro- 
vide adequate security for its new 
wave of worshippers? Conversely, will 
this product enforce a degree of “pro- 
tection” so stringent that the Inter- 
net’s freedom of exchange and techno- 
logical diversity will itseif be at risk? 
Will Microsoft safeguard users or its 
own commercial interests? Given the 
ubiquity of Microsoft technologies in 
the business world, what kind of prob- 
lems lie ahead? 

The Technology. Part of Microsoft’s 
contribution to the Trusted Comput- 


OPINION 





| ing Platform Alliance (a 


consortium founded by HP, 
IBM, Microsoft and Intel), 
Palladium is a software/ 
hardware combination os- 
tensibly designed to pre- 
vent piracy and protect cor- 
porate information. 

Set for release possibly as 
early as 2005, Palladium re- 
quires a new chip technol- 
ogy being developed by In- 
tel and AMD. This chip in- 
cludes new encryption 
functions alongside a small memory 
capacity acting as a digital vault and 
holding the keys to decrypt protected 
data. 

Palladium could be used to secure 
VPNs by enabling administrators to 
authenticate and identify computers 
on the network. It could protect net- 
works against pirated software and 
malicious worms. Microsoft has ap- 
parently promised to release some of 
the code so that developers can study 
and debug the software. 

So what’s the problem? 


Unnatural Selection. While 
Palladium will protect data, 
apparently it will do so ina 
selective manner by limit- 
ing users’ software choices 
to those authorized and li- 
censed by Microsoft and its 
allies: a virtual lock on your 
business’s capacity to em- 
ploy diverse technologies. 
This equates to chip-en- 
forced Digital Rights Man- 
agement (DRM). Microsoft 
owns a patent fora DRM 
operating system. If Palladium is bun- 
dled with future editions of Windows, 
will Microsoft have learned its lessons 
about fair business practice from its 
recent antitrust case. Can it protect its 
copyrighted material at the expense of 
other copyrighted materials? 

It seems that computers running 
Linux or other non-Microsoft operat- 
ing systems won't be able to use the 
chip. With many businesses relying 
on Linux, planners will face some 
serious choices. Should they work 
around Palladium, or abandon open- 





source systems altogether? 

Planners should also consider 
whether complete homogeneity among 
the security technologies used by busi- 
ness networks would make it easier for 
hackers to cause damage. Common 
sense has to be abandoned when there 
is only one basket to put your eggs in. 

“It’s a terrible scheme,” Philip Car- 
inhas, a Texas-based Linux consultant 
told me. “Any attempt to control tech- 
nology is inherently antitechnology. 
Unless a culture of acquiescence to 
Microsoft is overcome, however, many 
businesses will be stuck with it.” 

The outlook for non-Microsoft- 
approved technologies is bleak, but it 
will be an uphill battle for Microsoft to 
convince consumers and businesses 
that Palladium is a virtuous technolo- 
gy, intended to protect our city gates. 

Me? I’m wondering what form the 
Trojan horse will take. D 


WANT OUR OPINION? 


More coiumnists and links to archives of previous 
columns are on our Web site: 


| www.computerworld.com/columns 
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IMM FOX’S entire column 
“Don't Leave OS Choice to 

Developers” [QuickLink 35462] 
could have been replaced with the 
phrase “shut up and code.” The 
shut-up-and-code philosophy is 
nothing new. It dictates that the IT 
manager first asks developers for 
input into what tools they will use, 
then disregards them in favor of ad- 
vice from one of his golf buddies. 

To do shut-up-and-code right, it's 
imperative that developers not be 
told the overall goals of the organi- 
zation. Then, when they compiain 
about their glitchy, cumbersome 
tools, the IT manager can say, “You 
don't see the big picture.” The truly 
adept shut-up-and-code manager 
prevents developers from directly 
communicating with end users - in- 
stead filtering data that will become 
specifications and design through 
himself or his sycophants, who un- 
derstand little of what is practical to 
develop. What's the track record of 
shut-up-and-code development? 
For years, half the projects started 
were abandoned after considerable 
expense. Most of the other half 
came in very late and over budget. 
Steve Litt 
President, Trouble- 
shooters.com, Orlando 


aaa 


“Shut Up and Code’ Has Shoddy Record 


| Editor’s note: Computerworld 
readers had a lot more to say about 
Fox's column. See a longer version 
of this letter and more comments 

| online [QuickLink 35671]. Then 
head to our discussion forum 
[QuickLink a2830] to see still more 
feedback and to post your opinion. 


Watching the Clock 


N THE FUTURE WATCH article 
“Computer Clocks Wind Down” 
[QuickLink 34969], Gary H. Anthes 
managed to cover all sides of the is- 
sue at once in a very comprehensi- 
| ble way. Few people understand the 
| import of this issue, but | think some 
| of the greatest technology debates 
of the next decade will focus on it. 
Hopefully, this article will make the 

rounds and begin to stir up some 
much needed debate. 

David A. Somner 

Director of IT services, 

| StarDream Studios Inc., 


| Fort Lauderdale, Fla., 


dave@stardream.com 


| It’s Kind, Thrifty Too 
OW, IT'S JANUARY again, so 


it's time for us to think of 
Microsoft being trustworthy [Quick- 








Link 35562]. Can we expect Mi- 
crosoft to uphold the 12 points of 
the Boy Scout Law and take one of 
its tenets each month? You know, 
January, trustworthy; February, 
loyal: March, helpful; November, 
clean. And because we all worship 
Redmond, how appropriate that 
December's tenet would be 
“reverent.” 

Bill Ferguson 

Monte Sereno, Calif. 
infohub@ix.netcom.com 


Never Quite There 


VERY PUFF ARTICLE I've read 

about notebooks for the last 
umpteen years contains a variation 
on the phrase, “With power and 
features of notebooks rapidly 
approaching those of desktop 
computer systems. . . .” But of 
course, however rapidly they ap- 
proach, they never do catch up in 
power and features, because 


| there’s always the lag involved in 


miniaturizing the latest desktop 
hardware evolution. And they will 
always represent compromise, be- 
cause of their smaller keyboards. 
frustrating pointing devices, power 
management issues, greater fragili- 
ty and limited drives, storage, mem- 
ory and other shortcomings. 

The simple fact is that in order to 





pay for the miniaturization and the 
mobility that it affords, you will al- 
ways get less pure computing bang 
for the buck when buying a note- 
book. If you need the mobility and if 
the machine otherwise meets your 
needs, so be it - but enough with 
these transparently untrue oid 
chestnuts. They belong with im- 
mortal phrases such as, “Most 
users will never need to access (a 
full megabyte; 64MB; 256MB; 1GB) 
of RAM” or “Most users will never 
need the speed of a (33-MHz; 166- 
MHz; 500-MHz: 1-GHz; 3-GHz) 
processor.” 

Jim Keller 

Training director/PC manager, 
Rockland Children’s Psychi- 
atric Center, Orangeburg, N.Y., 
rcetimk@omh.state.ny.us 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site: 
computerworld.com/letters 
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Trust the facts first. Microsoft® Windows® 2000* operating system 
has been awarded the highest level Common Criteria Certification 
for. the broadest set of real world scenarios yet achieved by any 
ee (a ae by the Common Criteria for Information 
Technology Security Evaluation (CCITSE). The Common Criteria (CC) 
is'an internationally endorsed, independently tested, stringent set of 


standards that evaluate the security of technology products. 


Windows 2000 desktop systems and server family were evaluated 
against CC requirements beyond the Controlled Access Protection 
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select secure products for your environment and mark an important 





milestone on the road to providing you the highest level of assurance 


in Windows and all Microsoft products. 


For all the facts on Windows 2000 Common Criteria Certification 
and managing your security risk with Windows 2000, visit 
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For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


ROBUST OBJECT DATABASE 


ur post-relational databa 
New dimensions of scalability. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 
to four million users in 
88 countries. Caché is 
available for Windows, 
OpenVMS, Linux and 
major UNIX platforms. 


InterSystems » 


E.. CACHE 


Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.|nterSystems.com/post-relational 


© 2003 InterSystems Corporation. All rights reserved. InterSystems Caché is a registered trademark of InterSystems Corporation. 
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E’S BEEN A VIRUS 
writer for seven years. 
He goes by the handle 
Melhacker and may 
have been responsible 
for the recent out- 
| break of the Bugbear worm, the second 
or | most prevalent worm on the Internet 
: a | last year. Now he claims to be working 
. on a new virus, Scezda, that represents 
tt a é . | anew type of threat. 

, Scezda, as he describes it, falls into 
an emerging category of megaworms 
that combine features from some of 
i} 1 Ty 101 1 ] 1 TV . | this year’s most prolific worms and 

ofS | viruses, including Sircam, Klez and 
TU 0 0 ] Ta 10 m Nimda. It uses a random number gen- 
u 0 ; 1 0 | : | erator to determine how long it will re- 
1 f main dormant on a target system. 
i} i} / ita i afl ] itt) it Then it randomly chooses one of many 


i 

pi UC 16 | different methods to replicate itself. 
0001010001 0 Con] This is the essence of the new era of 

UU : | 





| x " megaworms, what some experts refer 
‘ | to as blended, or polymorphic, threats 
that rely upon multiple methods of 
propagation. And that’s just one way in 
which the virus threat is evolving. 


The next generation Of VITUSES | Current Threats 
may be more difficult than en 


field, Mass.-based Sophos Inc. detect- 


( | ed 7,189 new viruses, worms and Tro- 
ever to prevent and more | Suniottna ington 
° 


than 78,000. On average, the Sophos 


dest i ictive. By Dan Verton virus labs produce detection routines 

ee . | for more than 25 new viruses each day. 
Nine of the top 10 viruses detected 
by all major virus-protection compa- 

| nies in 2002 were mass-mailing viruses 

| that exploited known vulnerabilities in 

| the Win32 application programming in- 

| terface. And 87% of all reports of infec- 

| tions stemmed from Windows viruses. 

Continued on page 24 
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every kind of business. 
From “kind of start up” to “kind of FORTUNE 500. “ 
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No matter the size of your company, we've got a server that fits. Dell PowerEdge servers grow with your business, minimize downtime, are easy to integrate and 


even easier to support. No matter what your business needs — from file/print to database management — you can choose the server that is right for you. And, by 


dealing direct with Dell, you get a system customized to fit your business needs, at an affordable price, backed by our award-winning service and support. It's a nice mix 


of exactly the server you need with exactly the server you want 


Dell | Small Business 
PowerEdge” 600SC Server 


NEW Entry-Level Server with Performance Features 
© Intel® Pentium® 4 Processor at 1.80GHz 

© 128MB 200MHz E 

© Upgradeable to 4GB 

© 40GB* (7200 RPM) IDE Hard Drive 

© Upgradeable to 480GB° of Internal Hard Drive Storag 

© Embedded Intel* PRO Gigabit® NIC 

© Five PCI Expandability Slots (4-64/33MHz, 1-32/33MHz 
© 1-Yr 24x7 Dedicated Server Phone Te 
© 1-Yr Next Business Day On-Site S 

© Small Business Pricing 


as low as $16/mo., (46 pmts 
5A9 60 Days Same-As-Cash 
E-VALUE Code: 14460-S20105 
Recommended upgrades: 


e IDE RAID Hard Drive Controller, add $299 
© System Including Windows” 2000 Serve 


PowerEdge™ 2650 Server 


2U Scalabie Rack Server with High Processing Power 
© Intel® Xeon™ Processor Hz 

© Dual Intel” Xeon™ Processor Capable 

© 256MB 200MHz ECC DDR SDRAM (up to € 

© 18GB° (10K RPM) Ultra320 SCSI Hard Drive 

© Upgradeable to 365GB° of Internal Hard Drive Storage 
© Dual Embedded Gigabit* NICs 

© Dual-Channel Integrated Ultra160 

© Active ID Front Bezel for Monitoring S 

© 3-Yr Next Business Day On-Site Service 

© Smail Business Pricing 


as low as $54/mo., (46 pmts 
1899 60 Days Same-As-Cash 
E-VALUE Code: 14460-S20118a 


Recommended upgrades: 
© Dual-Channel Embeddec 
© Hot-Swap Redundan er Supply 


Click www.dell.com/computerworld 


Dell Rated #1 in Intel-Based Server Satisfaction 


Technology Business Research 


Corporate IT Buying Behavior and Customer Satisfaction Study 


PowerEdge™ 1600SC Server 


NEW Reliable, High-Performance Server 
© Intel" Xeon™ Processor at 1.80 
Jual Intel” Xeon™ Processor Ca 
IMB 200MHz EC’ f if 
3B° (10K RPM) U!tra320 Hard Drive 
© Upgradeable to 438GB° of Internal Hard Drive Stor 
¢ Embedded int 
64/100MHz 
ver Pr 
© 1-Yr Next Business Day On-Site Service 


© Small Business Pricing 


as low as $26 ‘mo., (46 pmts. 
R99 60 Days Same-As-Cash 
E-VALUE Code: 14460-S20108 


Recommended upgrades: 
© Hot-Swap Hard Drive Capability, add $100 
© PowerConnect 2124* 24+1 Ethernet Switch, add $299 


PowerEdge™ 2410 Rack Cabinet 


NEW Highly Serviceable, Entry Rack Cabinet 

© Accommodates Rackable Servers, Storage, and Power 
Management Solution i vironment 

© Easy Manageability with Optional Rapid Rails Mounting and 
Tool-Free Cable Management Solutions 

© Dimensions: Height — 48"; Width Depth — 4( 

© Max. Load of 1200 Pounds Allows for Large Storage C. 

© Built-In Lockable and Ventilated Front/Rear Doors to Help 

Security and Airflow 
© Optional UPS, PDU and Console Switches 


$ as low as $26 ‘mo., (46 pmts.") 
60 Days Same-As-Cash 


2nd Quarter 2002 
— August 2002 


Servers for any size business. Easy as DOLL 


Call 1-877-399-3355 


GO 


Online For 
Latest Prices 
and Weekly 
Promotions 
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Viruses 


S Today, the line 

© between worms and 
viruses is blurred as suc- 
cessful designs take on 
characteristics of both and 
spread over the Internet. 


DAN INGEVALDSON, TEAM LEADER, INTERNET 
SECURITY SYSTEMS INC.’S X-FORCE GROUP 
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Continued from page 21 

“Worms that are targeting known 
vulnerabilities are continuing to climb,” 
says Vincent Weafer, senior director of 
the Symantec Security Response group 
at Cupertino, Calif.-based Symantec 
Corp. “That’s significant because 
you're moving away somewhat from 
social engineering.” 

The most significant weakness ex- 
ploited last year was the so-called mal- 
formed MIME vulnerability, originally 
discovered in 2001. Although a patch 
has been available for more than a 
year, viruses and worms have been 
able to capitalize on this vulnerability 
on unpatched machines to automati- 
cally execute a virus program when a 
user views an e-mail in preview mode. 

Brid, Bugbear, Nimda and Klez all 
use this vulnerability, says Weafer. 

“Today, the line between worms and 
viruses is blurred as successful designs 
take on characteristics of both and 
spread over the Internet,” says Dan In- 
gevaldson, team leader of Internet Se- 
curity Systems Inc.’s X-Force group. 
“The most successful worms act like a 
Swiss Army Knife, because they can 
spread by using many different proven 
methods, such as mass e-mail, Web 
server vulnerabilities or peer-to-peer 
technologies.” 


Virus Evolution 

In the near future, companies will need 
to be prepared to deal with increasing- 
ly stealthy viruses carrying more de- 
structive payloads, say researchers. In 
a recent research paper, Stuart Stani- 
ford, CEO of Silicon Defense in Eureka, 
Calif., outlined the emerging “threat of 
surreptitious worms that spread more 
slowly but in a much harder to detect 
‘contagion’ fashion.” 

“We demonstrate that such a worm 
today could arguably subvert upwards 
of 10 [million] Internet hosts,” Stani- 
ford concludes. 

Anti-Virus Emergency Response 
Team (AVERT) researchers at McAfee 
Security, a division of Network Associ- 
ates Inc., say they encountered a virus 
that took advantage of the New Tech- 
nology File System (NTFS) Alternate 
Data Streams (ADS) feature, which al- 








lows data to be stored in hidden files 
that are linked to visible NTFS files — 


| and can’t be removed without deleting 


the NTFS file itself. 

Users who don’t have permission to 
write to a file can’t add an ADS to it. 
And although Windows File Protec- 
tion, introduced in Windows 2000, 
prevents hackers from replacing pro- 
tected system files, it doesn’t prevent 


~) an authorized user from adding ADSs, 


along with hidden, executable code, to 
those system files. 

ADS’s primary purpose is to enable 
compatibility with the Macintosh file 
system. But in September 2000, McAfee 
discovered a virus named Win2K.- 
Stream that attempted to conceal itself 
in an ADS. This works because most 
antivirus products don’t scan the ADS, 


says Vincent Gullotto, vice president of 


AVERT. McAfee has added this capa- 
bility. But so far, Gullotto has seen no 
other instances of this technique. 

The intentions of virus and worm 
writers are also changing. In the past, 
most worms and viruses destroyed 
data. Now, however, there are indica- 
tions that the masters of malicious 
code are looking to steal that data. 

“We'll see a progression toward tar- 
geting data,” says Gullotto. “We saw 
that this past year with Sircam, which 
randomly took documents out of the 
MyDocuments folder.” 


Virus Trends 
To Watch 


These worms and viruses change 
every time they replicate and target 
multiple vulnerability points instead 
of exploiting just one weakness. 


Like Sir- 
cam, which removed files from the 
user's MyDocuments folder, new 
viruses will be designed to steal 
data - not just destroy it. 
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Virus and worm pro- 
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Symantec’s Weafer agrees. “Payloads 
have moved from data destruction to 
dropping Trojans and compromising 
machines, as well as sending informa- 
tion from the machine out of the net- 
work,” he says. “You have to update 
your security patches.” 

Chris Wraight, a technology consul- 
tant at Sophos, says “combined cocktail 
threats” will be much harder for users 
to eradicate. Such a worm “might drop 
a Trojan, another virus, or it might rep- 
licate on another occasion,” he says. So 
just because you’ve uncovered one in- 
stance of the malicious code, it doesn’t 
mean you’ve discovered all infections. 

And while the vast majority of 
worms and viruses are written to tar- 
get known vulnerabilities in Windows 
platforms, some researchers are warn- 
ing Linux and Unix users to beware. 
The September outbreak of the Linux 
Slapper worm, for example, infected 
more than 20,000 machines and could 
be used for denial-of-service attacks, 
says Weafer. “We’re mixing Linux and 
Windows systems in the corporate 
world all the time,” he says. “People 
who have Linux and Unix systems as- 
sumed they were immune. We know 
that’s not true.” 

Microsoft Corp.’s .Net Framework 
may also become a major target for 
some virus and worm authors. “Alco- 
paul,” a member of the group Brigado 
Ocho, recently submitted his creation 
to antivirus research labs for evalua- 
tion. Although Alcopaul says his worm, 
topeace.exe, doesn’t destroy data, he 
claims that it is capable of turning off 
antivirus software, disabling firewalls, 
spreading to the Kazaa file-trading 
program and mailing itself to e-mail 
addresses it harvests from the Tempo- 
rary Internet Files folder via the Sim- 
ple Mail Transfer Protocol. 

Antivirus vendors are still studying 
Alcopaul’s worm to determine what 
specific vulnerabilities it exploits. 
However, past .Net worms have infect- 
ed .Net executable files. 

Although only users running Win- 
dows XP with Service Pack 1 have the 
-Net Framework installed, Alcopaul’s vi- 
sion is on the future. And that’s the rub 
for his targets — trying to find the right 
balance between acting on current 
threats and thinking about future ones. 

For now, the best protection is to 
stick with the basics, says Weafer. “Pay 
attention to security updates and lock 
down unnecessary services.” D 


AN OUNCE OF PREVENTION 


Find out what you can do to avoid future virus threats: 


QuickLink 35603 
www.computerworld.com 
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AGENTS 
CHANGE 


software agents tame supply 
chain complexity and optimize 
performance. By Gary H. Anthes 


million annually on an investment of 
less than 1% of that amount. 

Indeed, P&G's use of agent-based 
modeling helped it transform its sup- 
ply chain system so fundamentally 
that the company no longer even 


calls it a supply chain. The Cincinnati- 


based maker of Tide, Crest, Pringles, 
Pampers, Clairol and 300 other prod- 


ucts now calls its connections to 5 bil- 
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HEN IT COMES to IT projects, it 
doesn’t get much better than this: 


Procter & Gamble Co. saves $300 


lion consumers in 140 countries a “sup- | 


ply network.” 

“Chain connotes something that is 
sequential, that requires handing off 
information in sequence,” says Larry 
Kellam, P&G’s director of supply net- 
work innovation. “We believe it has 
to operate like a network, like an inter- 
net, so everybody has visibility to the 
information.” 

Many of the insights that have en- 
abled P&G to transform a chain into a 
network come from agent-based com- 





puter models it developed with Bios- 
Group Inc. in Santa Fe, N.M. Their 
work is a real-world example of what 
mathematicians call “agent-based 
modeling of complex, adaptive sys- 
tems,” a discipline pioneered by Bios- 
Group and other mostly Santa Fe- 
area companies, laboratories and 
think tanks. 

The idea is that many systems that 
are enormously complex overall are in 
fact made up of semiautonomous local 
“agents” acting on a few simple rules. 
By modeling and changing the agents’ 
behavior, one can understand and opti- 
mize the entire system (see FAQ). 

Agent-based modeling, while not yet 
commonplace, is catching on, especial- 
ly at companies with large, complex 
supply or transportation networks. In 
addition to P&G, the following compa- 
nies have tried it and cite benefits that 
include cost savings, reduced invento- 
ries and better customer service: 

@ Southwest Airlines Co. used soft- 
ware agents to optimize cargo routing. 
@ Air Liquide America LP, a Hous- 
ton-based producer of liquefied indus- 
trial gases, reduced both production 

and distribution costs with agent- 
based modeling. 

® Merck & Co. used agents to help it 
find more efficient ways to distribute 
anti-HIV drugs in Zimbabwe. 

@ Ford Motor Co. used agents to sim- 
ulate buyer preferences, suggesting 
packages of car options that optimized 
the trade-offs between production 
costs and customer demands. 

@ Edison Chouest Offshore LLC, an 
offshore service company in Galliano, 
La., used agents to optimize its deploy- 
ment of service and supply vessels in 
the Gulf of Mexico. 


P&G's Agent-Enabled Supply Network in 2008 


By 2008, P&G will have shortened the end- 
to-end replenishment cycle for a box of Tide 
from four months to one day. Here’s how: 


Sas 


It's 2008, and P&G has re- 

placed its numerous special- 
ized plants with a few “flexi- 
plants” - highly versatile facilities 
with quick turnaround capabilities 


SOURCE: FORRESTER RESEARCH INC. AND 
PROCTER & GAMBLE CO 
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Software agents of a key 

supplier detect a looming 
hurricane that threatens a Puerto 
Rico operation. They alert P&G's 
software agents and work with 
them to create an alternative deliv- 
ery schedule so P&G's Miami plant 
doesn’t face a material shortage. 





In P&G’s computer simulations, 
software agents represent the individ- 
ual components of the supply system 
such as trucks, drivers, stores and so 
on. The behavior of each agent is pro- 
grammed via rules that mimic actual 
behavior, such as, “Dispatch this truck 
only when it is full” or “Make more 
shampoo when inventory falls to x 
days’ demand.” 

The simulations let P&G perform 
what-if analyses to test the impact of 
new logistics rules on three key met- 
rics: inventory levels, transportation 
costs and in-store stock-outs. The mod- 
els considered alternate rules on order- 
ing and shipping frequencies, distribu- 
tion center product allocation policies, 
demand forecasting and so on. 

“Some of the conclusions were sur- 
prising, and some confirmed what we 
believed but didn’t have the data to 
support,” Kellam says. 

For example, he says, the models 
showed that it would often be advanta- 


| geous to send out trucks with less than 
| 


full loads, something P&G almost nev- 
er did before. Although transportation 
costs would be higher as a result, P&G 
could more than make that up by re- 
ducing the frequency of in-store stock- 
outs, which often result in lost sales. 

“Agent-based modeling convinced us 
of some changes we fundamentally 
had to make if we were to be flexible 
and adaptable,” Kellam says, explaining 
that changes fell into the following 
three broad areas: 

® Relaxation of rigid rules, often 
counterintuitively, in order to improve 
the overall performance of the supply 
network. That required some cultural 
changes, such as convincing freight 
managers that it’s sometimes OK to let 
a truck go half full. 

§ More flexibility in manufacturing. 
As a result of insights gained by the 


ee ee oe 


When pallets of Tide reach 

P&G's distribution centers, 
they're dynamically dispatched, 
with priority given to retailers 
whose inventories are very low. 
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FA = Agent-based modeling of 
=» complex, adaptive systems 


What are “complex systems” 
in this context? These are non- 
computer systems, such as a compa- 
ny's supply chain. A system is “com- 
plex” when it has so many variables 
and interacting forces that it can't be 
understood in its entirety or optimized 
by traditional, top-down approaches. 


How can you tame this 
complexity? Although these sys- 
tems are complex overall, they use a 
few simple rules at local levels. For ex- 
ample, in a supply chain system, a rule 
in a warehouse might be, “Fill orders 
on a first-in, first-out basis,” or “Don’t 
send this truck out on delivery until it 
is full.” Dozens or hundreds of these 
local “agents” - truck dispatchers, say 
- acting autonomously produce com- 
plex behavior by the system as a 
whole. It’s possible to simulate this 
complex behavior by programming 
software agents with a few rules 

and letting them interact with one 
another. By optimizing the agents’ 
activities at a local level, it’s possible 
to improve the performance of the 
system as a whole. 


Why are these systems called 
“adaptive,” and why are they 
sometimes likened to ant 
colonies? Ants individually have ex- 


tremely primitive brains, yet collective- | 
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When a tire blowout threat- 
ens to delay a shipment of 


livers it to Wal-Mart just in time. 


ly they run surprisingly sophisticated 
and efficient operations. With no cen- 
tral direction, they divide responsibili- 
ties among themselves, find food, 
build and maintain their nests, tend 

to their young and respond to attacks. 
And the colonies adapt; if you block 
access to a source of food, ants will 
find an alternate route to the food. 
Complex adaptive systems do the 
same. For example, if Plant A can't 
Satisfy a customer order because it's 
temporarily out of a raw material, 
Plant B may fill the order. Plant B may 
do this “automatically,” based on sim- 
ple local rules without direction from a 
central authority. 


What is meant by “emerging 
behavior”? Like ants, individual 
agents can modify their rules to adapt 
te changing circumstances, and this 
can alter the global behavior of the 
system, often in unpredictable ways. 
Sometimes small, local changes can 
have big system impacts, just as a tiny 
disturbance in the atmosphere over 
Africa can lead to a hurricane days lat- 
er in the Gulf of Mexico. Agent-based 
modeling can help us understand and 
predict these emerging behaviors and 
help us devise new rules for the local 
agents that will improve the perfor- 
mance of the system as a whole. 


~ Gary H. Anthes 


models, P&G is “fundamentally re- 
tooling” its manufacturing processes 
so that it no longer produces long runs 
of a single product but instead is able 
to produce every product every day. 
The benefits include fewer stock-outs 
and happier customers. 

® More flexibility in distribution. For 
example, it’s possible to restock a re- 
tailer in 24 hours rather than the cus- 
tomary 48 to 72 hours. 

P&G uses supply chain management 
software from SAP AG, but it turned to | 
a tiny New Mexico company when its 
long efforts to decrease inventory lev- 
els produced only marginal 
improvements. “We went to 
BiosGroup because they 
think very differently from 
the way we do,” Kellam ex- 


ply chain experts we went 
to thought very similarly to 
the way we do.” 

Computer modeling of supply chain 
operations, like that done by Bios- 
Group and P&G, today requires a com- 
bination of custom software develop- 
ment and consulting. But that could 
change as a result of a development 
agreement that P&G fostered between 
SAP and BiosGroup. 

SAP has already demonstrated a pro- 
totype agent capability in its replenish- 
ment software. Agents predict the 
probability of stock-outs — based on 
current inventory, scheduled receipts 
and expected demand — and when 
that probability exceeds a certain 
threshold, a replenishment signal is 
triggered, according to Christian Knoll, 
vice president of global supply chain 
management at SAP. 

SAP may introduce the prototype 
technology in its products, Knoll says, 
but for now it’s helping a few key cus- 
tomers try it out on a project basis. 


An expert looks at the future 
of agent-based modeling of 
complex systems: 

plains. “But most of the sup- © QuickLink 35614 
www.computerworld.com 


Navi Radju, an analyst at Forrester 


| Research Inc., says the supply network 
| that P&G operates is just the sort of 
| environment that lends itself readily to 


agent-based modeling. 

“It is exposed to a high degree of 
variability, involves multiple partners 
and requires a high degree of coordi- 


| nation and collaboration,” he says. 


“When the whole process is not owned 
by a company, you need a bottom-up 
approach to controlling, managing and 
optimizing the integrated process.” 
Radju predicts that such bottom-up, 


| agent-based optimization will increase 


in popularity — slowly. 
“P&G is a very forward- 
looking company, one will- 
ing to try new technology 
and learn from it,” he says. 
“But the mainstream compa- 
nies say, ‘Let’s not invest in 
unproven technologies.’ ” 
But Radju says big software compa- 
nies — especially SAP and IBM — over 
the next two years will roll out agent- 
based supply chain optimization pack- 
ages. Then, he says, the technology 
will shed its image as the intellectual 
domain of Ph.D. mathematicians. 
Meanwhile, P&G says that by 2008, 
software agents will enable another 
leap forward in supply network man- 
agement. While agents have so far 


| been used just for modeling, they will 


increasingly be deployed in P&G’s op- 
erational software, Kellam says (see 
diagram below). 

“What was once considered arcane 
and academic you are now beginning 
to see in real business applications,” 


| says George Danner, president of In- 
| dustrial Science LLC, a modeling con- 


sultancy in Houston. “What we need is 
brave, progressive, scientifically mind- 


| ed CEOs to say, ‘I want to understand 
| the physics of my business.’” D 


om 
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Intelligent 


Storage 


Object-based storage carries the promise of smart 
arrays that manage their own data. By Lucas Mearian 





MAGINE A STORAGE DEVICE that uses | 
its own horsepower to manage data, re- 
quires no manual settings for security and | 
doesn’t care if the client server speaks 
in blocks or files. That’s the promise of | 
object-based storage. 
Object-based storage technologies | 
shield the application or operating system 
from the low-level details of managing file 
storage. In one method, intelligence is added 
to the storage device in order to offload low- 
level storage management tasks traditionally 
handled by the operating system, such as 
mapping files to actual storage blocks on the 
disk drive and managing file attributes and other 
associated metadata. | 
Although widespread use of object-based storage 


is still some years away, the technology could result 
in storage systems that are more scalable, reliable, 
secure and manageable. 


Archit ve 
ecture 
eae aaa ed con Bas aie Fe ci 
adds intelligence to the storage device 
in order to offload low-level storage 
died by the operating system. in this 
example, OSD partitions the storage 
system around an iSCSI storage 
fabric. The storage manager still 
logically owns the storage devices, 
but new it can focus on maintaining 
the metadata that describes how a 
storage system maps to the object: 
based storage devices. The storage 
client consults the storage manager 
to learn of this metadata and then 
directly accesses the storage device. 
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FUTURE 
WATCH 


The T10 Technical Committee, which is part of 
the Washington-based InterNational Committee for 
Information Technology Standards and the Moun- 
tain View, Calif.-based Storage Networking Industry 
Association (SNIA), is working on a specification for 
object-based storage, called Object-Based Storage 
Devices (OSD). OSD turns files, directories and 
storage-related elements into objects that storage 
management software accesses using an 
extended SCSI-3 command set. 

“But SCSI is just one component of what 
we’re doing,” says Michael Mesnier, a stor- 
age architect at Intel Corp. and co-chair- 
man of the SNIA OSD Technical Work 
Group. “We’re also looking at a more general-pur- 
pose definition of object-based storage which is 
irrespective of the transport, which means you can 
run it over SCSI, you could run it over Fibre Chan- 
nel... over TCP/IP or whatever. To me, that’s a 
much stronger impact.” 


Lett) 


iSCSI Fabric 


Intelligence 
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By putting some of the intelligence for accessing ob- 
jects into the storage array instead of the application 
server, networks could be infinitely scalable because 
servers would no longer have to eat up bandwidth 
searching for and accessing files or blocks of data. 

“Just like you could plug a different hard drive into 
your PC, you could add another server to a storage 
system in the same way,” says Scott A. Brandt, 
an assistant professor at the Storage Systems Re- 
search Center at the University of California, Santa 
Cruz (UCSC). 

UCSC’s Jack Baskin School of Engineering is de- 
signing a high-performance storage network, based 
on commodity hardware, that can store up to 2 peta- 
bytes of data based on the proposed OSD model. 

“While you’re still dealing with blocks, they’re hid- 
den from the file system,” Brandt says. “As you add 
more storage, you’re adding more smarts. What might 
have been prohibitive details added to a large system 
are now details handled by the storage device itself.” 

Moving the object metadata and attributes out of 
the file system also eliminates the file server as a 
scalability bottleneck, Brandt says. 


Efficiency Gains 

OSD makes for a much more efficient I/O configura- 
tion, says Mark Bradley, a technology strategist in 
Computer Associates International Inc.’s BrightStor 
unit. “You're no longer having to pass all these low- 
level read/write blocks back and forth between a file 
system and a device,” he says. 

For example, Bradley says, a file system could say, 
“‘T need foo.bar, and foo.bar comes. Therefore, your 
communications over the interface, whether it’s a 
network interface or not, becomes much less compli- 
cated and takes up less bandwidth, and in turn cre- 
ates far fewer errors.” 

In April, EMC Corp. introduced what it calls con- 
tent-addressed storage, based on a new storage serv- 


er called Centera. Experts believe Centera is one of 


the first true object-based storage arrays. 
Centera is an array that also handles all storage 
management issues by assigning each stored file a 


| unique file object identifier that it passes back to the 


application. The application then requests that identi- 
fier to obtain the file, and the appliance takes care of 
the details of where and how the file is actually stored. 

Mesnier emphasizes that the proposed standard is 
not a completely new model. “It’s just taking [Net- 
work File System], in a sense, and applying it to what 
used to be considered dumb peripheral devices,” he 
explains. “Imagine a world where two different file 
systems agree on data, then go directly to the same 
storage device and share the same data.” 

He says that the biggest benefits of object-based 
storage will come in the form of increased, more 
granular security and data-sharing capability. 

“If I look at a block-based device today, an individ- 
ual block cannot be protected,” Mesnier says. “Once 
you get access to the entire device, you can read or 
write to any block you want to. You could format 


the device if you want- 
| CLUSTER LUSTRE 


ed to. With object- 

based storage, you CaN | po online for a look at a Linux-based 

ascribe a security do- Cluster file system based on objects: 
QuickLink 35633 


main to each and 
every object.” D www.computerworld.com 
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Securi 


Problems Put 


Survey App on Sidelines 


Design flaws leave a Web-based 
survey application open to com- 
promise. By Mathias Thurman 


UCH OF MY normal 
routine has been put | 
on hold while I at- 
tend to a legal matter 

that requires generating mir- | 

ror images of about 30 em- 
ployees’ laptop hard drives. In | 

response to a request from a 

federal agency, we’re using 

Pasadena, Calif.-based Guid- 

ance Software Inc.’s EnCase 

Forensic Edition to 

obtain those images. 

It takes about five 
hours to create each 
compressed 40GB 
drive image. Fortu- 
nately, the imaging 
process can run unat- 
tended. That has given me 
enough time to squeeze in a 
security review of anew Web 
survey application — a proc- 
ess that revealed several un- 
pleasant surprises. 

First, however, I had to get 
the disk images going. EnCase 
creates a boot floppy disk that 
write-protects the hard drive, 
then it lets you manually or 
automatically detect the desti- 
nation storage device. I used 
the network port to connect to 
my forensics workstation via 
an Ethernet crossover cable 
and began acquiring the image 
for storage on a DVD-ROM. 


Survey Insecurities 
Our legal counsel requested a 
security assessment for a new 
Web-based customer survey 
tool. Members of the deploy- 
ment team questioned why we 
needed to assess a survey tool 
at all. “It’s not like we’re col- 
lecting credit card data, per- 
sonal information or storing 
source code,” one staffer said. 
He had a point. The appli- 
cation is being used so that 
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our customers can complete 
surveys to assist us in provid- 
ing a better experience for 
them. It doesn’t collect any 
personal or financial data. But 
we might ask our customers 
to evaluate our performance 
and to specify deficiencies in 
the way we do business. We 
don’t want such information 
falling into the hands of our 
competitors. Be- 
cause of this issue, 
our general counsel 
determined that the 
data should be con- 
sidered confidential. 
Not only are we 
worried about the 


| compromise of the survey re- 


sults, but this application will 
also have a Web server resid- 
ing on the Internet-facing de- 
militarized zone (DMZ) seg- 

ment of the network. The ap- 


| plication itself uses a three- 


tier architecture consisting of 


| a front-end Web server, a mid- 
| tier application server and a 
| back-end SQL database server. 


If hackers were to compro- 


mise any of the infrastructures, 


they could access other infor- 
mation such as server configu- 


Even on a switched 
network, it’s still possi- 
ble to capture traffic 
and compromise even 
encrypted protocols 
such as Secure Shell 
and HTTPS. 


rations, user identifications 
and passwords, which can usu- 
ally be cracked. They could 
also install packet-sniffing 
software to capture traffic and 
use it to gain access to other 
areas of our infrastructure. 
For example, if a hacker ran 
a sniffer on a compromised 
Web server and the server ad- 
ministrator accessed another 
resource on the same network, 
the hacker might be able to 
obtain the administrator’s log- 
on credentials. Even on a 
switched network, it’s still 
possible to capture traffic and 
compromise even encrypted 
protocols such as Secure Shell 
and HTTPS. If you don’t be- 
lieve this (and I didn’t at first), 
read the Ettercap program 
specifications at http:// 
ettercap.sourceforge.net/. 


Exploiting Deficiencies 
Assessing the security of the 
application is always more of a 
challenge than assessing the 
server and operating system 
on which the application is in- 
stalled. The latter typically in- 
volves checking for open ports 
and vulnerable services. But 
an assessment should attempt 
to exploit deficiencies in the 
way an application was writ- 
ten or configured. I used sev- 
eral methods to try to gain ac- 
cess, including two common 
exploits: SQL injection and di- 
rectory traversal. 

SQL injection attacks occur 
when, for example, the appli- 
cation doesn’t validate the data 
entered into forms. If a hacker 
enters SQL statements into a 
Web-based form and the ap- 
plication passes the inputted 
data to the database server, it’s 
possible for the database serv- 
er to actually execute the SQL 
statements it receives. If the 
database contains credit card 
numbers or other financial 
data, a properly crafted SQL 
| query can retrieve it. 








Directory traversal also 
works as a result of insuffi- 
cient data validation. It’s pos- 
sible to issue commands from 
the address line of a Web 
browser that will let a hacker 
view any file on a Web server 
by traversing outside the nor- 
mal directory of the applica- 
tion. For example, it might 
look like this: http://www. 
webserver.com/../../../../../etc/ 
shadow. 

In an unprotected machine, 
a hacker could use this Web 
address to view the shadow 
file, which contains the en- 
crypted password for user ac- 
counts on most Unix systems. 
From there, it’s a simple mat- 
ter of copying the data into a 
text file and running a pass- 
word-cracking tool against it. 
These vulnerabilities are nor- 
mally easy to mitigate, but dis- 
covering them can be difficult. 
I use Sanctum Inc.’s AppScan 
for this purpose (see box). 

I found the results of my 
application assessment quite 
alarming. There were several 
directory traversal and SQL 
injection vulnerabilities. In 
addition, the application 
stored account information in 
clear text. All these vulnera- 
bilities will have to be mitigat- 
ed before I give the applica- 
tion a clean bill of health. 

Next, I plan to review all of 
our public-facing Web-based 
applications and review ad- 
ministrative access to our criti- 
cal DMZ servers, which appear 
to have serious deficiencies. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: 


QuickLink ai590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal. 
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3Com Enhances 
Web Caching Tools 


3Com Corp. in Santa Clara, Calif., 
has announced content-schedul- 
ing and content-filtering upgrades 
to its SuperStack 3 Web caching 
product line. The controls are de- 
signed for large organizations 
that use Web browsers and need 
to control wide-area network 
bandwidth use and restrict the 
content that their employees can 
access, 3Com officials said. 

The Webcache 1000 starts at 
$4,999, and the Webcache 3000 
starts at $7,999, with the new 
version available now. Existing 
customers can obtain the up- 
grades by purchasing an update 
cr support contract. 


New Check Point 


VPN/Firewall Line 


Redwood City, Calif.-based Check 
Point Software Technologies Ltd. 
last week announced a new, 
combined virtual private network 
(VPN) and firewall management 
product. The company’s latest 
VPN-1/Firewall-VSX product fam- 
ity builds on its existing Provider-1 
and SmartCenter management 
suites with new features such as 
secure routing between different 
virtual LAN segments, simplified 
network provisioning and en- 
hanced attack prevention capa- 
bilities. Pricing ranges from 
$24,000 to $250,000. 


Procom Updates 
NAS Filers 


Procom Technology Inc. last 
week announced enhancements 
to the management interface of 
its NetForce family of network- 
attached storage (NAS) filers. 
The Irvine, Calif.-based company 
added an object-based adminis- 
tration interface that presents in- 
formation to users in a hierarchi- 
cal fashion. Users can manage 
various system objects under one 
view, including volumes, parti- 
tions and directories. The up- 
grade comes with Version 4.2 of 
Procom’s operating system, now 
shipping with all Procom filers. 
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TOMMY PETERSON 


Catch th 
Wireless Wave 


ANUARY, our month of resolutions, is almost 
over. The saturated fats and simple carbs are 
creeping back into our diets, while the frequency 
of trips to the gym is trending downward. A half- 
day search for my notes for this column suggests 
to me that my resolve to get organized is falling a 
bit short of the mark. As a metaphor for the economic 


climate, this season of dis- 
appointment is a little too 
close for comfort. In it, only 
the tough and the focused 
keep their heads up high 
enough to see over the wall 
of the bunker most of us 
have hunkered down into. 

And what those resilient 
optimists in corporate IT 
are looking for is opportu- 
nity — choices they can 
make even in hard times to 
improve the way their 
companies do business. 

The dangers of the marketplace and 
the need to use resources wisely are 
clear. But being timid is not necessari- 
ly prudent. The bells, whistles and 
gee-whiz technologies have been put 
in mothballs in most corporate IT de- 
partments, but that decision can come 
at a price. Some very slick technolo- 
gies that seemed like extras a short 
time ago will soon be essential to the 
way companies work. 

One of those is wireless networking. 
Many of us, especially in the U.S., have 
been carping about the slow adoption 
of wireless for so long that we’ve 
failed to recognize the wireless wave 
breaking over corporate IT. My Com- 
puterworld colleague Mark Hall pre- 
dicted in a Dec. 16 column [QuickLink 
34561] that by 2012, every new digital 
device in the enterprise will be wire- 
lessly connected. Absolutely right, but 
awfully conservative. 





“Wireless is a reality in 
the enterprise, in Europe at 
least — and it’s coming to 
be so in the States,” Amir 
Lehr told me last week. 
Lehr is vice president of 
PowerDsine, an Israeli 
company that he says is 
riding the wave of wireless 
adoption with its Power 
Over Ethernet technology. 

If your existing infra- 
structure is, well, not quite 
up to date and you’ve been 

listening to the unfulfilled predictions 
about wireless for several years, you 
might think that it'll be a while before 
your company considers the move. 
Maybe so, but your competitors might 
not wait for you. 

There are two main forces at work 
moving corporate IT toward wireless. 
The first is the pull of the technology 
itself. The 802.11b standard is chugging 
toward maturity, while its siblings — 
a, g and the coming high-performance 





802.15.3, to name a few — represent 
the first of many more protocols that 
will eventually provide the glue to 


bind wireless networks together. 


| 


The other force is the push from end | 
users who have gotten used to check- | 
ing their AOL and Hotmail accounts | 
from the corner coffee shop. Wireless | 
is no longer a novelty to them; it’s a 
promise of freedom, connectivity and | 
uninterrupted productivity. And don’t | 
forget that the next generation of IT | 


professionals will have spent their col- 
lege careers thinking that access to a 
wireless LAN is as normal as access to 
the library. 

OK, there’s still a way to go. Clearly, 
if the uses of the technology are going 
to get more sophisticated than con- 
necting tradesmen to inventory, sched- 
uling and dispatching systems, more 
progress must be made on the interop- 
erability front. But as painful and halt- 
ing as that progress may be, the strug- 
gle is familiar — we saw it with other 
significant technologies as they ma- 
tured and gained acceptance. And the 
payoff for both users and vendors is 
sufficient to ensure that standards will 
prevail. 

Questions about security, worrisome 
in relation to any technology used in a 
corporation, are somehow harder to 
put to rest about wireless. 

Wireless security is very much like 
security in the wired world — the 
right technology is important, but pol- 
icy and practice are more so. The keys 
are rigorous authentication of users 
and devices by the host system, and 
improved encryption to protect data 
while it’s in transit. The 802.11 Wired 
Equivalent Privacy standard has 
proved to be woefully inadequate, but 
the coming 802.1li protocol will in- 
clude the government-approved Ad- 
vanced Encryption Standard. Security 
will always be a race, but the good 


| guys will soon have the tools to keep 
| ahead of the hackers and crackers. 


So as you turn the Groundhog Day 
corner toward spring, take a peek over 
the bunker wall and think about the 
future of your company’s IT infra- 
structure. The wireless wave is com- 
ing — now’s the time to catch it. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 








V2X Subsystem 


To me, success is a 35 minute lunch. 
At a restaurant, not my desk. 
Means I’m not wasting time doing the 
same data management task again and 

| 


\ 
again and again and...well, you'get it. 


Save the day. 


Consolidate your work by consolidating data from all your different systems. One way is with a V2X Shared Virtual Array” subsystem 
and SnapVantage” software to unite all your Linux virtual servers. Or an L5500 automated tape library and T9940B tape drive. There 


are other ways, too. We'll help find the one that's best. So storage administration takes a smaller bite out of your day. Learn more 


about this story and other ways we can help you at www.savetheday.com a STORAGETEK’ Save the Day™ 





MANAGEMENT 


Big Recruiters on 
Campus? Not This Year 
There’s plenty of experienced 
talent among the ranks of the 
unemployed. Read our Campus 
Connection, starting on page 36. 
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Handling the Hard Case 
Motivating most IT people 
is easy, but what do you do 
with those who just don’t 
buy in? Page 39 


Manage Suppliers for Project Success 
Research shows that few large IT projects 
meet their full objectives. Columnist Bart 
Perkins offers some tips on how to complete 
your projects within budget and with all the 
features. Page 40 





otore e-mails properly, or you could 


face stiff fines. 





Tens of thousands of e-mails pass through 
the offices of Friedman, Billings, Ramsey Group Inc. 
every month. 

The Arlington, Va.-based financial services 
holding firm had stored e-mails on tape, but CIO 
Jerry Carlsen recently was given the task of up- 
grading that storage system to one that has the 
ability to index and archive e-mails. 

So Carlsen dedicated 60 hours of his IT staff’s 
time each week for four months to work with SJ 
Technologies LLC, a global systems integrator in 
Phoenix, to develop the new e-mail storage system. 
The system required six new servers and uses 
EmailXtender software from Legato Systems Inc. 
Carlsen is still assessing what the best storage 
media will be. 

With new hardware and software in place, Friedman, 
Billings, Ramsey has a system that’s capable of storing 
and indexing e-mails from 450 employees at 16 loca- 
tions worldwide. Now if employees or regulators 
want to retrieve an e-mail, they can use the date, 
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Continued from page 33 
user, topic or other identifiers to find it. 

Such attention to e-mail might seem excessive, but 
executives in industries across the board are realiz- 
ing that properly storing messages has become seri- 
ous business as courts, government officials and 
industry regulators increasingly order expensive 
searches and issue stiff fines for lost or poorly stored 
e-mails. 

Consider this: Securities regulators recently fined 
five Wall Street firms — Goldman Sachs & Co., Salo- 
mon Smith Barney Inc., Morgan Stanley, Deutsche 
Bank Securities Inc. and Piper Jaffray Inc. — a total 
of $8.25 million for not keeping certain e-mails for 
the required period of time [QuickLink 34912]. Regu- 
lators said the five firms violated securities rules by 
failing “to preserve for three years, and/or to pre- 
serve in an accessible place for two years” such of- 
fice memoranda as e-mails related to their exchange, 
brokerage or dealer businesses. 

Companies must follow legal and regulatory re- 
quirements that dictate what records to keep and for 
how long. These rules generally don’t speak to the 
media on which those records originated; instead, 
they usually apply to all records, whether they’re pa- 
pers, e-mails or electronic attachments. 

Brokerages often have the tightest regulations 
when it comes to archiving records, experts say. For 
example, the Securities and Exchange Commission 
requires that they keep securities transactions for 
seven years. But brokerages aren’t the only ones 
working under record-keeping requirements. 
Lenders must keep Home Mortgage Disclosure Ap- 
plications — whether on paper or in e-mail — for 
three years. Human resources departments must 
keep personnel records, including 
e-mailed applications and re- 
sponses to job ads, for one year 
from the date of personnel action. 

“It’s a technology nightmare, 
and it’s going to get worse as the 
years go on and the e-mails build 
up,” says Mark E. Schreiber, a 
partner in the labor and employ- 
ment department at Boston law 
firm Palmer & Dodge LLP. 

Companies that don’t keep re- 
quired documents, including 
e-mails, could face more than 
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fines, says Mickey C. Andrie, a sales manager at SJ 
Technologies. Under the SEC regulation known as 
17a-4, financial services firms could be hit with cen- 
sure or with license suspension or revocation as well. 

Firms that fail to archive e-mails so they’re easily 
and quickly retrievable also face the high cost of try- 
ing to recover one or two messages demanded by a 
regulator or a judge, for example. 

Winston Krone, managing director in the San 
Francisco office of SafirRosetti, a security consulting, 
| investigation and intelligence firm, has worked on 
cases where he had to sort through 150GB of infor- 
mation to find required e-mails. A midsize company 
with a couple of venues could spend up to $500,000 
combing through corporate e-mails to find one or 
two messages, he says. 

Certainly, companies had to cope with records re- 
| tention for decades prior to e-mail, and many em- 
ployed compliance officers or lawyers to oversee 
| records management. But executives have had 
less experience in dealing with 
archiving e-mail, experts say, and 
that has led to some of the confu- 
sion on the issue today. 

“E-mail exploded on the scene 
with no traditional solutions,” 
says Deborah Baron, director of 
product marketing at Zantaz Inc. 
in Pleasanton, Calif. Zantaz pro- 
vides digital archiving and 
records management tools as 
well as electronic discovery to 
meet the regulatory, audit and le- 
gal compliance needs of financial 
services firms, energy companies 
and government agencies. 

And with the SEC getting 
tough on e-mail archiving after 
finding incriminating e-mails 
during recent scandals like the 
one that took down Enron Corp., companies are now 
paying closer attention to the topic. 

In light of that, experts agree that technology per- 
sonnel shouldn’t be the only ones devising e-mail 
storage policy. Companies should have legal counsel, 
regulatory managers, human resource executives and 
IT personnel formulate a strategic plan for storing, 
archiving and managing the data. 

They should start by defining their goals, says Lau- 
ra Harrison, project manager for SJ Technologies’ 
| messaging business division. SJ has partnered with 
Mountain View, Calif.-based Legato, a provider of on- 
line data storage management and data access prod- 
ucts, and with Orac'e Corp., to 
design and implement enter- 
prisewide content management 
systems as well as customized 
storage applications. 

Companies must decide 
whether to keep all e-mails or 
only specific ones. Most compa- 
nies, after doing a risk analysis, 
decide to keep them all, even 
those that just say “Let’s meet for 
lunch,” rather than risk deleting a 
crucial e-mail that might later be 
required, Harrison says. 


Three years 








Archive This 


Various federal and industry 
regulations require that com- 
panies store records for mini- 
mum lengths of time: 


= Securities transactions 
and related records: 
Seven years 


= Mortgage applications 
and lending documents: 


= Personnel records, 
including e-mail applica- 
tions: One year 





Next, IT staffs should examine the number of em- 
ployees and the volume and size of the average 
e-mail, experts say. They should also consider what 
needs to be kept near-line or online, how often stored 
messages will be accessed, and who will access them. 
In general, simply adding more disk capacity to exist- 
ing backup storage systems won't be sufficient to 
meet legal and regulatory requirements, says Baron. 


The Security Angle 


Baron advises companies to also consider security 
when devising e-mail storage systems. “E-mails 
stored on backup tape leave room for tampering. 
That’s why real-time archiving is critical to meet le- 
gal and regulatory requirements,” she says. 

Consider U.S. Food and Drug Administration regu- 
lation 21 CFR Part ll, which establishes the criteria un- 
der which electronic records and signatures are con- 
sidered equivalent to paper records and handwritten 
signatures. It requires in part that access to electron- 
ic records be restricted to only 
authorized personnel and that 
companies must be able to re- 
trieve stored data for the same 
length of time as equivalent paper 
records, which can mean up to 10 
years or longer. 

“When companies are not fully 
compliant with 21 CFR Part ll, 
the FDA makes a case-by-case 
evaluation as to whether or not 
to pursue regulatory actions. 
Noncompliance might lead to 
regulatory exposure, costly re- 
work and downtime, compro- 
mised product quality, and even 
fines, prison sentences and sanc- 
tions,” according to the Web site 
of Princeton Softech Inc., a 
Princeton, NJ., company focused 
on data management products and services. 

Experts say e-mail storage usually involves invest- 
ing in new hardware, such as network-attached stor- 
age or storage-area networks; software to manage it; 
networking equipment such as routers, switches and 


| firewalls; and a database administrator. 


A company would pay approximately $100,000 for 
hardware and another $100,000 for software for a 
5TB protected configuration, according to estimates 
provided by EMC Corp. in Hopkinton, Mass. 

Companies can expect a total e-mail storage sys- 
tem to cost six to eight times as much as the base 
storage hardware (for example, a RAID storage sys- 
tem or optical disks) on an ongoing basis, Baron 
adds. So if a company spends $1,000 per month for 
storage hardware, it should budget $6,000 to $8,000 
per month to manage the system. 

But Christopher Laping, vice president and CIO at 
Denver-based GMAC Commercial Holding Capital 
Corp., says costs are often secondary to meeting the 
evolving regulatory and legal requirements for 
e-mail storage. 

As SJ Technologies President and CEO Ian Singer 
says, “It’s more an issue of compliance.” D 





Pratt is a freelance writer in Waltham, Mass. Contact 


| her at markmary@mindspring.com. 
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Reliable data storage from Dell. 
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Entry-Level NAS 1U Rack Solution 
Intel® Celeron® Processor at 1.70GHz 
© 384MB DDR SDRAM 
© 4x40GB° (7.2K RPM) IDE Hard Drive Storage 
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Home-Sc 


FedEx and other for- 
ward-thinking compa- 
nies are teaming up with | 
neighboring universities 
to teach the IT skills 
their businesses require. 
dx, ar enh 
By Mary Brandel 
EMPHIS HAS LONG SERVED 
as home base to technology 
innovator and shipping giant 
FedEx Corp. This fall, the city 
hopes to become a hotbed of 
leading-edge technology re- 
search and learning, when the 
four-story, $23 million FedEx Technology Institute 
opens at the University of Memphis. 
The vision is for the center, which was pioneered 
and partially funded by FedEx, to become “the digital 


epicenter of the Mid-South,” says Jim Phillips, chair- 
man and executive director of 


CAMPUS the institute. On-campus stu- 
dents, professors and scien- 
Ue) tists, as well as researchers and | 
business executives inside and 
outside of FedEx, will gain access to “mind-blowing 
technologies with unbelievable applications in an in- 
finite number of areas,” he says. 

A very distinct benefit for FedEx is that the institute 
will increase and sharpen the skills of the local IT tal- | 
ent pool, and it will produce graduates right in Mem- | 
phis who have training and experience that jibe with 
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FedEx’s needs. But Phillips is quick to point out that 
the new center isn’t just an adjunct FedEx training fa- 
cility, nor does FedEx control its research efforts. 

However, he says, the institute will absolutely at- 
tract more students interested in IT to the University 
of Memphis, which will help FedEx and other compa- 
nies fulfill their IT needs. The hope is that the train- 
ing might even attract new business to Memphis. 
“Absolutely, I can see some really interesting and rel- 
evant centers of technology inside the FedEx Insti- 
tute that relate to FedEx missions,” Phillips says. 

At the institute’s Center for Next Generation 
Transportation, for instance, “we’re working to cre- 
ate an invisible plasma on the wing surfaces of air- 
planes to drive fuel costs down by as much as half,” 
Phillips says. “And in trucking, we’re working on a 
unit that plugs into the truck cab that will help save 
billions on diesel fuel.” 


Beneficial Partnerships 


In this climate of layoffs and few new jobs, particu- 
larly at the entry level, many large employers are 
opting out of campus recruiting this year (see story, 
page 38). But a few forward-thinking companies are 
seeing the wisdom of working with area universities 
and community colleges to turn their regions into 
hubs for IT activity. The benefits are plentiful, these 
companies say: The talent, in effect, comes to you, 
lowering recruiting costs; you can home-grow talent 
in lifelong local residents, who tend to be long-term 
employees; and you can influence school curricula to 
meet your IT needs. 

“The majority of companies are not doing what 
they need to do to develop skills proactively,” says 
Maria Schafer, an analyst at Meta Group Inc. “When 
things do pick up, they’ll be scrambling to find peo- 
ple.” She recommends that companies maintain rela- 
tionships with universities or training institutes to 
ensure that the basic skills they need are being 
taught. They can then, in turn, expand upon them. 

Retaining IT employees and creating a larger local 
talent pool were goals of Missouri’s state govern- 
ment in the late 1990s, says Jan Grecian, a technology 
specialist for the state in Jefferson City. “We employ 
roughly 1,400 IT professionals, and there are other 
businesses here in town,” she says. “We were doing a 
lot of stealing from one another.” Salaries were also a 
problem: People could easily move to the larger cities 
of St. Louis or Kansas City to double their money. 

So the state, local IT employers, area universities 
and colleges, and the Chamber of Commerce formed 





oling 


Not Your Typical 
Schoolhouse 


Scheduled for completion this fall, the 
four-floor, 93,000-sq.-ft. FedEx 
Technology Institute has three key goals: 


To produce a digitally savvy workforce 
and student pool. 


To conduct world-class interdisciplinary 
research. 


To be an evolving, dynamic resource 
through which local businesses can 
come together to find solutions to real- 
world problems. 


With its extensive use of wireless 
technologies and high-speed Internet2 
backbone, the new facility “is not your typ- 
ical red-brick schoolhouse,” says Jim 
Phillips, executive director of the institute. 
Its 200-seat “Forum,” for instance, has 
technology that professors can use to give 
quizzes with immediate scoring feedback 
or conduct instant polls. A presentation 
theater has a digital screen, spatially dy- 
namic sound control and sensory body 
suits that could, for example, be used to 
help students learn the nuances of orches- 
tral conducting. And its “Cafe Wired” offers 
wired and wireless Internet connections. 

The institute will give businesses a 
place to work together on projects and 
solve business problems, and it will offer 
campus scientists more space for 
research and better opportunities for 
interactions with off-campus researchers. 

It is FedEx’s belief that the institute will 
create a symbiotic relationship between 
the University of Memphis and Memphis- 
area businesses and start-ups that the 
area just didn’t have before, says Phillips. 





a coalition and developed a mission to get more local 
people into the IT field. The group, which meets 
once a month, targeted high school students to raise 
their awareness of local IT education and job oppor- 
tunities. The coalition also focuses on workers in 
other careers who want to retool for the IT field. 
Coalition members also joined the advisory boards of 
local higher education centers. 

“All the schools have been good at rising to the 
challenge and tweaking their curriculum” to meet 
employers’ needs, Grecian says. For instance, in 1997, 
many of the schools were looking at dropping Cobol, 
but the coalition urged them not to because many IT 
shops were still heavily invested in that technology 
and hadn’t gone through Y2k remediation yet. 

A top-notch networking degree program was add- 
ed as a direct result of the coalition needing more 
networking talent, Grecian says, and more recently, 
some schools have agreed to consider adding Micro- 
soft .Net to their curricula. Additionally, a college 
about an hour away installed a satellite school in Jef- 
ferson City, offering computer science, networking 
and Web development programs. 

All of this has resulted in a greater number of qual- 
ified IT candidates. “The numbers have increased 
substantially in the local schools where they’ve 
added to the IT curriculum,” Grecian says. 


“Two-Way Street’ 

Even big-name companies in large cities see the need 
to increase IT noise levels and influence the IT cur- 
ricula at area schools. “The more we can do to make 
the IT curriculum enticing to bring others in and 
keep the kids who live here, the better off we are,” 
says Don Haile, president of Fidelity Investment Sys- 
tems Co., the IT arm of Fidelity Investments in 
Boston. “When we bring in kids from local universi- 
ties, there’s a greater degree of loyalty.” 

Fidelity has worked with Babson College in 
Wellesley, Mass., on its human interface design cur- 
riculum and has served on task forces and advisory 
boards at the University of Massachusetts, Bentley 
College and MIT. 

“I always get asked, ‘What should we be teaching?’ 
We'll be clear that we want students to understand 
Java and XML and that they need to get on board with 
-Net.” Haile says. “They know this, but we’re just 
confirming their suspicions. It’s a two-way street — 
I’m looking for new blood, and they’re interested in 
seeing what we think and what we’re doing.” 

Everyone agrees that no college program can be 
expected to produce students with the leading-edge 
skills that are immediately valuable to an employer. 
But, Grecian points out, if you can encourage area 
residents to follow the IT route at local schools that 
are teaching the curriculum that matters most to 
nearby employers, “they come out with the concepts 
down and a desire to learn, and they'll do continuous 
training at their place of employment.” 

Even in the current economy, Grecian says, the 
coalition’s work is well worth the effort. “We haven't 
been as active lately” because of the economy, she 
says. “But the work isn’t going away. It’s just a matter 
of time, and we’ll see this cycle around again.” D 





Brandel is a freelance writer in Newton, Mass. Contact 
her at brandels@attbi.com. 
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There's plenty of 
experienced talent 
among the ranks of 
the unemployed. 

By Barbara DePompa 


OR A SECOND STRAIGHT YEAR, formal 
on-campus recruiting of IT graduates 
is way down, thanks in part to the 
slow economy, an abundance of unem- 
ployed IT talent and continued corpo- 
rate belt-tightening. 

Recruiters and IT executives from just about 
everywhere but Microsoft Corp. say there are sim- 
ply too many experienced IT professionals available | 
from businesses that have laid off workers in the past 
two years. 

Moreover, few new jobs are being created. In a 
December survey of 150 CEOs representing compa- 
nies employing a total of 10 million people, 80% of 
the respondents said they would hold the line or re- 
duce capital spending in 2003. “This will most cer- 
tainly stunt job creation,” says John Challenger, CEO 





of Challenger, Gray and Christmas Inc., which con- 
ducted the survey. 

The IT talent glut makes it unnecessary for com- 
panies to go fishing on college campuses for more IT 
personnel. “It’s simply crazy to recruit workers with- 
out job experience when there are so many talented 
IT professionals available,” says Rob Collins, CIO 
at business intelligence software provider Cognos 
Inc. in Ottawa. 


Downturn Predicted 


A survey released in late December by the Bethle- 
hem, Pa.-based National Association of Colleges and 
Employers (NACE), which tracks college graduates 
for recruiters and human resources professionals, 
confirms the bleak job outlook for all college gradu- 
ates. In August, NACE projected that employers 
would hire 3.6% fewer college graduates in 2002-03 
than they hired in 2001-02. In December, 60% of 312 
employers responding to NACE’s latest survey re- 
confirmed their intentions to hire fewer new college 
graduates, and the rest said they plan additional cuts 
in college-grad hiring. 

Many businesses have no budget or mandate to 
hire on college campuses now, says Maria Schaffer, 
an analyst at Meta Group Inc. in Stamford, Conn. 
Meta will publish the results of its annual survey 
of Fortune 1,000 CIOs later this quarter. But Schaffer 
says that according to the raw survey data, 
fewer than 2% of CIOs will recruit on cam- 
pus this year, down from 6% in 2001 and 
way down from a high of 18% of companies 
in 2000. “Many companies may end up 
sending a human resources person for a day to inter- 
view top candidates at leading colleges, but most 
aren’t making immediate job offers,” she says. 

In fact, most companies are counting on most of 
their competitors to forgo campus recruiting this 
year, says Bill Coleman, senior vice president of com- 
pensation at Salary.com Inc., a human capital man- 
agement software and research firm. “That way every 
company will be on the same footing when the situa- 
tion improves and jobs become available,” he says. 

But there’s a significant exception. Microsoft, 
which is expanding its campus recruiting this year, 
views the pullout by competitors as shortsighted. 
“We are committed to college recruiting,” says 


Recruiters 


Campus: 
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Few Jobs, Plenty 
Of Internships 


40% of employers will continue current 
internship programs. 


9% of companies have no formal 
internship program. 


SOURCE: NATIONAL ASSOCIATION OF COLLEGES AND 
EMPLOYERS, BETHLEHEM, PA., DECEMBER 2002 


Kristin Roby, Microsoft’s senior director of college 
and MBA recruiting. “Companies that turn away now 
risk losing the relationships they will need when the 
economy fully recovers,” she says. 

Over the past few years, Microsoft has recruited 
about 600 computer science students per year for full- 
time positions. This year, it will increase that to 800 
new hires, though Roby admits the additional 200 per- 
sonnel hired won’t come from the computer science 
field. Instead, she says, Microsoft will hire more col- 
lege grads from marketing, finance and 
human resources programs [QuickLink 
34428]. It attributes its hiring needs to 
overall continued growth. Currently, 
Microsoft has more than 53,000 employees 
and recruits from more than 250 schools. 

Some experts say Microsoft is smart to buck the 
no-campus-recruiting trend. “Right now, the last 
thing I want is to be in the same boat as my competi- 
tion — | want to smash and kill them. And that’s why 
it’s smart to build strong college campus relations 
now,” says retired Elf Atochem CIO Bob Rubin, who 
is now president of Valley Management Consultants 
in Huntington Valley, Pa. 

“When the economy turns around, businesses will 
want to be back on campus in force, and that’s diffi- 
cult to do if you’ve sev- ———_——— 


ered your ties,” says Mar- HARD TIMES 
FOR IT WORKERS 


ilyn Mackes, executive 
director of NACE. : 

Go online to see exactly who makes 
up the ranks of the IT unemployed: 


It’s also a good idea to 
keep internship programs © QuickLink 29295 
www.computerworld.com 


up and running, because 
they are far less expen- 
sive than full-blown campus recruiting initiatives, says 
Mackes. Cognos’ Collins says the company will con- 
tinue to hire college grads using this method. If their 
interns work well within the company’s corporate cul- 
ture, they are often offered jobs after they graduate. 
Recruiters and analysts emphasize that a small re- 
cruiting effort is better than none and will likely reap 
rewards in a few short years. They say that barring a 
major terrorist strike or a long, drawn-out war, they’re 
hopeful that the current jobless recovery will start to 
improve and create a need for more IT personnel in 
the second half of the year. D 
DePompa is a freelance writer and editor in German- 
town, Md. Contact her at bdepompa@comcast.net. 
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Handling 


the 


Hard Case 


Motivating most IT people is easy, but what 
do you do with those who just don’t buy in? 


45 If you help 

a disruptive 
person find some 
new way, your 
reputation will be- 
come enhanced, 
the culture will 
——: and you 
will forestall other 
problems. 


NIGEL NICHOLSON, DIRECTOR, 
CENTRE FOR ORGANISATIONAL 
RESEARCH, LONDON BUSINESS 
SCHOOL 


Motivating 
problem employ- 
ees is a perenni- 
al challenge for 
IT managers. In 
this month’s 
Harvard Busi- 
ness Review, 
Nigel Nicholson, 
the director of 
the Centre for 
Organisational 
Research at London Business 
School, argues that trying to 
motivate hard cases may be the 
| wrong approach. He talked 
with Kathleen Melymuka about 
a method designed to help them 
motivate themselves. 
| Why is trying to motivate a prob- 
| lem IT person the wrong ap- 
proach? You have to help peo- 
ple try to find their own ways 
to motivate themselves. I’m 
talking about intrinsic motiva- 
| tion — about hearts and 
minds. Your job is more to 
clear away the undergrowth. 


Give me an example of how not to 
motivate a problem person in IT. 
Telling someone how interest- 
ing you find these problems 
they’re working on or how 
lucky they are to have such an 
interesting job when you 
know that they don’t find it 
interesting. 


How do you begin a different ap- 
proach? First of all, it’s about 
finding out where the people 
are misaligned. 

If you listen, they will tell 
you. Often, they’re misaligned 
| with the environment. If, for 








example, they’re on the help 


| desk and they really don’t like 


dealing with people, take them 


| off the help desk. 


A typical problem is trying 


| to motivate a subordinate who 
| thinks he’s better technically 

| than the manager. That gets in 
| the way, but it needn’t. 


What do you do about that? 


| There’s nothing wrong with 

| managing someone more 

| skilled than you. It happens all 
| the time. You say, “I know you 


have more skills than I have. 


| What can we do to help each 
| other make this operation a 

| success for both of us?” It’s a 
| partnership problem. 


| This sounds fairly simple. But it 

| can be difficult because often 
| the person is someone you 

| really haven't got a lot of sym- 
| pathy or empathy with. You 
don’t like the person or per- 

| haps you've had a row with 

| him. We're not really motivat- 
| ed to understand people with 
| whom we’ve had some bad 


experience. Often we’re more 
concerned with being right 
and their being wrong. 


Once you understand the person 
better, what do you do next? In- 
stead of saying your goal is to 
motivate this person, you may 


| have to start with something 
simpler — perhaps to open up 


a channel of communication 
so you can begin to work to- 
gether. You can worry about 
motivation later, but if you 
haven’t got a channel open, 
you can’t work with them. 





You say the manager also needs to 
re-evaluate himself and the work 
context. Tell me about that. You 
may get off on the wrong foot 


| with a person over a bad ex- 


change, and you take that as a 
sign he’s a bad person, and it 
starts to spiral. But perhaps 


you haven't been handling him | 
| right, and you're bringing out | 
| the worst in him. You may 

| need to change the way you 


communicate with him. 


| Where does this all lead? You 


stage a formal encounter. You 


| say, “We have a problem and 


we need to figure out what it 
is, and if we see the world 
differently, that is part of the 
problem. We need to get the 
same view.” It amounts to your 
seeing the world from his 


| point of view, and that helps 
| you to help him center. 


Then what? In the course of this 
encounter, you may discover 
things you didn’t know. You 
may even have to call a time- 


out for more reframing of your | 


goals. Or this may take you on 
a collision course to the point 


. : : | 
where the person is dismissed. | 


But at least you’ll know why 
you're doing it. 


All this seems enormously time- 


consuming. After all, the IT manag- | 
| er has a department to run. These 


issues are not separate from 
your job; this is your job. 

In the end, you will gain 
time because you will reduce 


| problems. You will discover 


that you’ve been treading 
water, and now you'll move 


| ahead. 


But what if you’re just coddling a 


| person who really ought to be 


fired? You need to decide 
whether there’s a recovery 
path or not. If the answer is 
no, then don’t even get into 
this. I’m trying to avoid the 
danger that comes when you 
try to settle a performance 
problem and it escalates to the 
point where you do have to 


| fire someone, when you could 


have solved the problem. 

Good IT people are enor- 
This is the latest in a series of monthly 
discussions with authors of articies in 
the Harvard Business Review on topics 
of interest to IT managers. 





Reaching 
Common 
Ground 


DON'T have the same 
fruitless conversations 
over and over. 


DO discard your assump- 
tions about the person 
and start fresh. 


DON'T try to convince the 
person of the reasonable- 
ness of your position. 


DO find what drives that 
person and clear away 
the obstacles. 


DON'T miss the other 
person's viewpoint. 

DO ask yourself how the 
person would describe his 
DON'T ignore how the 
person perceives you. 
You'll have to work with his 
teality as well as your own. 


| mously valuable. You can’t 


afford to toss them over 
the wall when you have a 


| problem. 


You say there are benefits to this 
approach that go beyond the man- 
ager and the problem employee. 
What are they? If you help a 
disruptive person find some 
new way, your reputation will 
become enhanced, the culture 
will improve, and you will 
forestall other problems. Peo- 
ple will start to regain confi- 
dence in the way things are 
run and see that you believe in 
working for constructive solu- 
tions. That has a tremendous 


| impact, and if you do it right, 


you'll be loved for it. D 


| Melymuka is a Computerworld 


contributing writer. Contact her 
at kmelymuka@earthlink.net. 


SINGING FOR THEMSELVES 


How to tone down IT prima donnas to 

enhance staff harmony and productivity: 
QuickLink 32735 
www.computerworld.com 
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Health Care, Fed to 
Lead IT Spending 


The federal government and the 
health care industry are expected 
to show the strongest growth in 
IT spending this year, according 
to a vertical-market IT spending 
forecast issued last week by San 
Jose-based Dataquest Inc. State 
and local governments’ IT spend- 
ing will shrink because of budget 
deficits. 

The largest global vertical mar- 
kets - financial services, manu- 
facturing, government and com- 
munications - are expected to 
make up 67% of worldwide busi- 
ness IT spending this year. 


Groups Oppose Fed 
Copy-Control Rules 


Two major industry groups, the 
Business Software Alliance and 
the Computer Systems Policy 
Project, which represents large 
hardware makers, struck a pact 
this month with the Recording In- 
dustry Association of America, a 


top music industry trade group, to | 


oppose federally mandated copy- 
protection technologies in soft- 
ware and hardware. They aren’t 
opposed to technologies intro- 
duced voluntarily. 





BART PERKINS 


www.computerworld.com 





Manage Suppliers 
For Project Success 


OST ORGANIZATIONS begin a large 

system development effort by creating 

a business case, identifying a program 

sponsor and developing a work plan. 

These are widely recognized as criti- 
cal foundations for success, and without them, your 
program is likely headed for failure. 


However, even with a 
good foundation, research 
shows that few large proj- 
ects meet their full objec- 
tives. About $75 billion is 
spent yearly on failed IT 
projects, and poor manage- 
ment and methodology are 
the chief culprits, accord- 
ing to Gartner. And in 
2002, more than half of 134 
large multinational compa- 
nies surveyed by KPMG 
experienced a failed IT 
project during the year. 

The average cost of each 

failure was about $8 mil- 

lion. While no company 

would dream of throwing dollars away, 
failed projects essentially have the 
same result. 

Many organizations severely under- 
estimate another critical piece of the 
project foundation: the enormous im- 
pact their suppliers will have ona 
project’s outcome. Projects frequently 
fail because suppliers are underman- 
aged, undercoordinated and, all too of- 
ten, ignored. The average Fortune 500 
company may have 15 to 20 suppliers 
directly involved in each of its major 
system development projects. These 
suppliers include providers of hard- 
ware, software packages, middleware 
or systems integration services. Se- 
lecting the right suppliers and manag- 
ing them effectively is crucial to pro- 
gram success. In addition to perform- 





ing traditional supplier 
management activities, be 
sure to do the following: 

@ Guard your infrastructure. 
Large projects often intro- 
duce new technologies 
into your organization. 
When you commit to an 
application package, you 
may be unknowingly com- 
mitting to additional soft- 
ware. An Oracle-based 
company, for example, may 
choose a software package 
but then discover that it 
performs better on a SQL 


Server database than on an | 


: Oracle database. Further- 
more, beware that many suppliers will 
want to change your architecture to 
better incorporate their technology. 
Make sure that all hardware and soft- 
ware required by your suppliers meets 
your architectural specifications. 

@ Identify and understand your suppliers. 
Carefully assess their corporate direc- 
tion, their cost structure (how they 
make money), and the exact services 
they will provide. If possible, under- 
stand their compensation program and 
get your supplier to specify objectives 
for its staff that are aligned with the 
success of your own program. 

@ Bring key suppliers on board as soon as 
possible. Make sure they’re committed 
to the total program and not just to 
their own deliverables. Include them 
in the initial project planning phases, 





and get their buy-in for your work 
plan and schedule. Include key suppli- 
ers in most of the regular program 
progress meetings. 

@ Create effective project performance mea- 
surements. Suppliers can meet their de- 
liverables and still adversely affect 
overall program success by refusing to 


| share enough information or by offer- 


ing only minimal cooperation to other 
suppliers involved in the project. In 
the contract (in addition to specific 
deliverables), focus some supplier per- 
formance measures on overall pro- 
gram success (just as your employees’ 
bonuses are often based on a combina- 
tion of their individual objectives and 
corporate success). 

@ Address the cultural resistance. Be pre- 
pared to deal with pushback from your 
own people about sharing information 
openly with a supplier, as well as 
pushback from suppliers about sharing 
their information with other suppliers 
on the project. Define the level of 
openness required at the beginning of 
the program, and get supplier buy-in. 

@ Re-examine the total cost of ownership. 


| The cost of a software package is fre- 


quently only 10% to 20% of the total 
development cost. Over the life of the 
program, total development costs are a 
small percentage of total operating 
and maintenance costs. Remember to 
include the cost of all suppliers in- 
volved in the program. 

An alarming percentage of large sys- 
tems development projects fail. Ad- 
dressing these supplier issues will 
help minimize common pitfalls. Make 
your suppliers an explicit part of your 
systems delivery process to leverage 
your development dollars and increase 
your likelihood of program success. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to: 
www.computerworld.com/opinions 
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Software Application Engineer 


Utilizing Dreamweaver, Flash, 
Photoshop and interdev to 
develop and modify graphic 
designing software, interface, 
and program for client's need. 
Analyze user needs and devel- 
op solution in web development 
and graphic designing. Design 
web-developing or graphic 
designing software, customize 
software, and template for client 
use. Apply the developed pro- 
gram and software and work 
with client in developing custom 
web application. Analyze web- 
developing and graphic-design- 
ing databases, coordinate data- 
base development as part of a 
team. Requires bachelor degree 
and 2 years exp. in graphic 
designing, interaction designing 
including site architecture, user’ 
interfaces and _ navigation 
schemes. Experience must 
include two-year experience in 
DHTML, CSS, HTML, ASP, Java 
Script, VB Script, XML, Flash, 
Adobe Photoshop Send 
resume to: Priority IT Inc. 10497 
Town & Country Way, Suite 950, 
Houston, TX 77024. Attn 
Personnel. No faxes please. 


Senior Technical Architect (muiti- 
ple openings) needed to design 
system structure, implement, & 
maintain enterprise-grade CRM s/w 
solutions using E.piphany on com- 
plex global multi-platform projects. 
Direct jr. consultants & manage all 
business/tech. aspects of projects. 
Design & implem. custom web- 
based applics. rel. to CRM & 
E.piphany using JSP, ASP, HTML/ 
DHTML, XML, JAVAScript, J2EE, & 
JBOSS. Req. BS in CS, IS, MIS, or 
IT or equiv.. Also req. 2 yrs. exp. in 
offered job or in E.piphany consult- 
ing at a technical lead tevel. In lieu 
of BS, will accept 3 yrs of univ. 
studies toward BS in stated field + 
3 add'l yrs.’ exp. in software engi- 
neering. Must have E.piphany pro- 
duct certification in at least 2 of 
these 3: Interaction Platform, E 

piphany Fundamentals, Campaign 
Management for Technical Profess- 
ionals. Req. 80% travei throughout 
US. No calls. See www.epiuse.com 
icompany/jobs.php Apply by 
resume to Ref. 74HR, EPI-USE 
America, Inc., 400 Galleria Pkwy. 

Ste. 1500, Atlanta, GA 30339 


OmniPros, a worldwide provider 
of software solutions seeks moti- 
vated IT professionals specializing 
in the following areas: 


Java, J2EE, Oracle, WebLogic 
Webmethod 

Vitria 

Tibco 

Portals 

Oracle CRM (Technical, 11i) 
Oracle Manufacturing (Technical/ 
Functional, 11i) 

Oracle Finance (Technical, 11i) 
Business Development/Technical 
Operations Management 


Please e-mail resume to 
careers@omnipros.com, fax res- 
ume to (925) 249-1702, or mail 
resume to 


OmniPros Ltd 
5980 Stoneridge Drive Suite 109 
Pleasanton, CA 94588 


www.omnipros.com 


Prog/Analysts to analyze and de- 
sign datawarehousing / datamart 
applis using Cognos tools, Oracle, 
MS SQL Server, HTML, Java, C++ 
Java Script, JSP, VB on UNIX 
Windows OS or to analyze and 
design S/W appls using SAP R/3, 
ABAP/4, Workflow Technology, C, 
C++, VB, Oracle, MS SQL Server 
on UNIX and Windows OS; gather 
and document reqs from user com- 
munity; test and troubleshoot pro- 
ject appin code according to sys- 
tem objectives. Require: B.S. or for- 
eign equiv. in CS/Engg (any bra- 
nch) with 2 yrs exp. in IT. High sal- 
ary. F/T. Travel Involved. Openings 
in Norcross, GA and Imperial, PA. 
Indicate location desired. Resumes: 
to: HR, Smartsoft International, 
Inc., 4898 S. Old Peachtree Rd., 
Ste 200, Norcross, GA 30071 


CWO030127E/WIMW.1 


Systems Engineer. Job opportunity 
in Brunswick, Georgia. Respons- 
ibilities include: utilize knowledge of| 
Microsoft operations and network- 
ing systems to design, install, 
administer, maintain, and upgrade: 
computer applications, networks 
and systems on three locations 
connected over WAN link. Must 
have a Bachelor's degree or for- 
eign equivalent in Computer 
Science or Electrical Engineering 
and two years of experience as a 
Systems Engineer. Must be Micro- 
soft Certified Systems Engineer, 
land be proficient in Microsoft 
Exchange 5.5 and 2000 administra- 
tion, Microsoft Windows NT 4.0 and 
2000 based network administra- 
tion, Microsoft SQL Server 2000 
database administration, Microsoft 
System Management Server 2.0. 
Windows Terminal Server, and liS. 
Experience in maintaining GEN- 
TRAN E-Commerce Systems in 
Windows 2000 is required. If quali- 
fied, submit resume in duplicate. 
salary history and salary require- 
ments to the address below. 
Incomplete submittals will not be 
considered. 

Ms. Mariene Parmiey 
Manager of Corporate 
Human Resources 
Rich-SeaPak Corporation 
200 Glyndale Drive 
Brunswick, Georgia 31520 


GeoDecisions, a subsidiary of} 
Gannett Fleming, seeks candidates 
for GIS positions in Camp Hill. 

GIS Application Developer 
Provide support for GIS work as 
part of GeoDecisions team, assist 
to plan, analyze and develop GIS 
application; Assist in design and 
management of database for GIS. 
develop data modeling diagrams 
and prepare flow charts and block 
diagrams. Involves using HTML. 
Java/ JavaScript, ASP, Oracle, Vis 
Basic, SQL. Requires exposure to’ 
GIS and a Master's Degree in 
Computer Science or related field 

Programmer Analyst on GIS 
team: Analyze, evaluate and modi- 
fy systems and programs for GIS 
data processing. Work with tools 
including web, HTML/DHTML, ASP, 
JavaScript, GeoMedia, GeoMedia 
WebMap, Visual Basic, VS.NET. 
You must have 2 yrs. of relevant 
‘exp. and a Bachelor's Degree in 
Computer Science or related field. 

Send resume with cover letter indi- 
cating position preference and ref- 
erence code MW to: Gannett 
Fleming, Inc., 207 Senate Ave. 
Camp Hill, PA 17011. EOE M/F/D/V. 


Software Developers 


Develop the company's J2EE 
based portal product. Tasks 
cover application lifecycle, 
including analysis, design, tech- 
nical research, coding, applica- 
tion servers configuration and 
must have Bachelor Degree in 
Science, Math or Engineering 
and a minimum of 2 years of 
experience in the following 

Xpath, SAX, DOM, Http 

JUnit, J2EE, Xalan's 
Extension, XML, XSL and 
framework design, 9-6, 40 hours 
minimum per week. 


Mail resume to: 
Mongoose Technology, Inc. 
1300 Hercules Dr., Suite 130 
Houston, Texas 77058 


Network Systems Administrator: 
Req: 6 yrs. exp. as Ntwk Sys 
Admin, Ntwk Sys Analyst, or 
Comp. Prgrmr. Duties: install, 
configure & support the org’s 
WAN, & Internet syst; 
maintain ntwk hardware & soft- 
ware; monitor ntwk to ensure 
availability to sys. users, per- 
form necessary maintenance to 
support availability; & plan, 
coord, & implement ntwk securi- 
ty measures. Competitive sal 
Pise send res. to Diego 
Schwartz at Powerpoint 
International Corp. 6724 NW 
72nd Ave. Miami, FL 33166. 


Ger Vat 


COMPUTER PROFESSIONALS 
Opportunities for: 


+ WEB ARCHITECTS/ 
DEVELOPERS 
SYSTEMS ANALYSTS 
WEB GRAPHIC DESIGNERS 
NETWORK ENGINEERS 
PROGRAMMER/ANALYSTS 
SOFTWARE ENGINEERS 


SKILLS: 


+ COLD FUSION « SPECTRA 

+ ORACLE + VISUAL BASIC 

+ VISUAL C++ + SIEBEL + ASP 
* COM, DCOM + JSP + HTML 

+ JAVA, JAVA BEAN + EJB JAVA 
SERVLETS + WEBSPHERE 

+ IBM MQ SERIES + XML,UML 
* MTS + CLARIFY + PERL 

+ OBJECTPERL + SPYPERL 

+ SMALLTALK +» PLUSQL 

+ VISUAL AGE + COBOL, SPL 
UNIX 


Visit our website @ 
www.computerhorizons.com 


Attractive salaries and benefits. 
Please forward your resume to: 
H.R. Mgr., Computer Horizons 
Corp., 49 Old Bloomfield 
Avenue, Mountain Lakes, New 
Jersey 07046-1495. Call 973- 
299-4000. E-mail: jobs@ 
computerhorizons.com. An 


Equal Opportunity Employer M/F 


Software Development Engineer 
to work under supervision to 
design and develop risk assess- 
ment software. product 
enhancements, and defect reso- 
lutions utilizing object-oriented 
languages including C++ and 
Java, ODBC, OLE and Sybase 
Adaptive Server in an NT envi- 
ronment. Requires a BS in 
Electronic Engineering & 2 yrs. 
exp. Oakland, CA job location. 
Refer to job Z-OKL-1 


Software Test Engineer to work 
under supervision to conduct 
performance tests on risk 
assessment software using 
object oriented technologies 
including C++ and Apache Ant. 
Apply knowledge of statistical 
and probability mathematics and 
programming to test and/or 
modify risk assessment aigo- 
rithms. Requires a BS in 
Computer Science & 2 yrs exp. 
Oakland, CA job location. Refer: 
to job HC-QAE 


Mail resume to L Phillips, ABS: 
and Affiliated Companies, 16855 
Northchase Dr., Houston, TX 
77060 


F/T Computer Systems Adminis- 
trator. To manage information 
system activities and design 
POS systems using Visual Ba- 
sic, Microsoft SQL Server 2000 
& 7.0, MS FrontPage, Access: 
2000, and Vb Script. Must have 
4 yrs. of exp. Must have Bach- 
elor's degree or foreign degree 
equivalent in Software Engineer- 
ing. Course work must have 
included Computer Architecture 
& Microprocessor courses. 
Salary: Competitive. Send res- 
umes to: T. Ford, Le Petit Bistro, 
Inc., 5600 Roswell Rd., East 
Bidg., Ste 250, Atlanta, GA 
30342. No Calls Please 


Multiple openings at Imperial, PA 
and Norcross, GA for Prog/Sys 
Analysts, DBA's, S/W Engineers to 
design/develop S/W appis using 
some of the following - COGNOS. 
datawarehousing; Cobol, CICS. 
DB2; Java, PB, HTML, XML; C++ 
VB, Oracle, Dev 2000; wireless 
web, OO technologies; SAP, ABAP/ 
4; Oracle/Sybase/Informix data- 
base admin; Unix/NT system 
admin. BS/MS or foreign equiv. in 
CS, Engg, Science, Math, Business 
or related field and relevant exp. 
High salaries. F/T. Travel involved. 
Indicate office location desired 
Respond to: HR, Smartsoft Inter- 
national, inc., 7900 Steubenville 
Pike Suite 21, Imperial, PA 15126 


Full-Time Application Engineer. 
Supply Chain: Design, develop, 
prototypes and test supply chain 
software application models 
based on solution designs as 
well as develop functional, per- 
formance and systems integra- 
tion test plans, planning work 
flow and modify and create 
reports. Provide detailed data 
requirements to build supply 
chain software application mod- 
els. Construct prototype and test 
supply chain software applica- 
tion modes for super-users 
Develop and execute functional 
test plans for super-users, per- 
formance test plans and provide 
and implement statistical data 
analysis solutions. Work with i2 
products; Supply Chain software 
applications __ inc. Demand 
Planning, Inventory Planning 
Replenishment Planner and 
Supply Chain Planning as well 
as work with HP-UX, Unix and 
Windows NT environments. 
Must have Master's degree in 
Business Administration, Comp- 
uter Science, or related field 
Must have minimum 2 years 
experience in the job offered or 
position with same duties. Send 
resume: Ann Christante, PSS 
World Medical, Inc., 4345 
Southpoint Boulevard, 
Jacksonville, Florida 33216 


ENGINEERING 

Riverstone Networks is looking 
for experienced individuals with 
bachelor’s degrees or equivalent 
for the following positions 


* Director of Business 
Development (Solution 
Architecture 

+ Configuration Engineer! 
Principal Configuration 
Engineer 

+ Advanced Technologies 
Principal (Systems Engineer) 
+ Software QA Engineer 

* Software Engineer 


See our website at 
www.riverstonenet.com for more 
information. Must be able to 
show valid US work authoriza- 
tion. Send resume to 
Riverstone Networks, Attn 
Professional Staffing, 5200 
Great America Pkwy, Santa 
Clara, CA 95054; or Fax: (408) 
878-6790. Email 
jobs@riverstonenet.com 
EOE 


Database Administrator, 
Magazine Publication. Min- 
imum 6 years exp. Design, 
program, and implement 
database applications. 
Provide database systems 
administration, including 
managing users, defining 
user security policies, and 
disaster recovery 40 
hrs/wk, 9AM-5PM. Comp- 
etitive salary. Send resume 
Koa Life 2505 
Tucker Rd., 

GA 


Multiple fulltime {T positions 
available for ERP Profession- 
ais. Req. B.S. in Computer 
Science or related, and mini- 
mum 2 years on-the-job expe- 
rience in system design, con- 
figuration, development, pro- 
gramming, testing, training & 
implementation of ERP solu- 
tions involving one or more of 
the following areas - SAP, 
Oracle, interfaces, QA 
Testing, Integration Tools 
Resume to NexLink Systems, 
Inc., 2517 Grendon Drive, 
Wilmington, DE 19808 


Job opportunities in Charlotte, NC 
and Atlanta, GA NIIT seeks highly 
skilled software and SAP Project 
Managers to manage multi-tiered 
client/server, Internet/Intranet 
based, multi-user, re-engineering 
applications projects and SAP 
projects; manage systems ana- 
lysts, business analysts and sup- 
port staff; audit applications quali- 
ty to ensure adherence to Quality 
Management Systems; manage 
implementation of applications. 
manage user acceptance tests 
and user training. Must be fluent 
in the design, development, impie- 
mentation and optimization of 
Internet-based applications and 
databases using Visual Basic 
C++, ASP, XML, VB Script, Java 
Script, MTS, IIS, object-oriented 
applications, GU! tools, case 
tools, Oracle Server 7.3 or higher 
or MS-SQL Server 7.0 and UNIX 
must be proficient in Internet Bill 
Presentment and Payment appli- 
cations. Must be willing to travel to 
client sites Monday-Friday. Must 
have a Master of Science Degree 
or foreign equivalent in Computer 
Science, Engineering or a related 
field and at least three years of 
experience in SAP systems inte- 
gration, systems analysis, pro- 
gramming analysis or software 
engineering, or a Bachelor of 
Science Degree or foreign equiva- 
lent in Computer Science, Engin- 
eering or a related field and at 
least five years of progressive 
experience in SAP systems inte- 
gration, systems analysis, pro- 
gramming analysis or software 
engineering. If interested, submit 
resume in duplicate to: 

Ms. Sandy Pruitt 

NIIT (USA), Inc. 

1050 Crown Pointe Parkway 
Suite 500 
Atlanta, GA 30338 


Computers 

Multiple positions opened in 
B2B Technoiogies, Inc. in North 
Brunswick, NJ for Senior’ 
Software Engineer. The appli- 
cant must have a B.S. w/5 yr. 
experience or M.S. w/2 yr. expe- 
rience in telecom application 
design & development with 
degree in computer science or 
engineering or related fields 
Job duties include designing 
and developing architecture for 
customer application systems to 
provide online network manage- 
ment services using object-ori- 
ented technology and various 
software developmentitesting 
tools, and developing and imple- 
menting high performance appli- 
cations using various data com- 
munication protocols, standards 
and equipment. Please send 
resume to: Ms Dolores H 
Maher, 201 N. Center Dr., North 
Brunswick, NJ 08902 or fax to 
732-951-0704 


PROGRAMMER ANALYSTS 
for Chicago, !L office. Design & 
Develop software applications 
using C, C++, VB, Delphi, ASP, 
XML, Coolgen, interwoven 
Develop client/server applica- 
tions in oracle, PL/SQL 
Developer 2000 & Designer 
2000. Bachelors req.d in 
Computers, Engineering or 
related field of study +2 yrs of 
related exp. 40 hrs/wk. Must 
have legal authority to work per- 
manently in the U.S. Contact 
HR Manager, Anthropology 
International, Inc. 1120 North 
LaSalle Dr, #9P Chicago, IL 
60610 


MphasiS-BFL Ltd. and its 
subidiary Mphasis Corporation 
has multiple openings for the fol- 
lowing postions at its office in 
New York and unanticipated 
client sites throughout the U.S. 
Prgrammer Analyst, Software 
Engineer, Proejct Manager. 
Management Analyst, Sales 
Engineer, Business Develop- 
ment Manager Finance 
Manager. Please send resume 
and salary history to: hr@mpha- 
sis.com or mail to 444 Park 
Avenue South, Suite #503, New 
York, NY 10016 
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Programmers, Jr. Programmers. 
Software Engineers & DBAs 
Design, develop, test and impie- 
ment specialized software apps 
in (a) Oracle Financials and 
Manufacturing 111i and related 
tools, Erwin, Cognos Suite 
Business Objects and MF 
Cobol; (b) SQL DBA, Unix 
Admin., VB, Sybase, Cobol, C 
Cold Fusion and related tech- 
nologies; (c) J2EE and related 
technologies, Rational Clear- 
Case, CORBA, MQSeries and 
related tools; (d) BDF, JPROBE 
Test Factory, Requisite Pro. 
CORBA, Patrol DB, LDAP 
Server and Silk Pilot; (e) 
EAZYTRIEVE+, Xpedio Server, 
SQL Backtrack, PatroiDS 
NetlQ, Infopac, Netview and 
Gauntlet Firewall; (f) PeopleSoft 
HRMS (HR, Payroll and Benefits 
Administration) Application 
Engine, SQR, Cobol, DB2 
CICS, nVision, Crystal Reports 
and related tools; (g) Java and 
related tools, CORBA, Sybase 
Swing and Rational Tools (h) 
Oracle Database Admin. in 
Oracle 11i, Oracle Enterprise 
Manager, Solaris AIX, VB, C++ 
SQL*Plus and related tools; (i) 
Cold Fusion and related tools. 
ASP, XML, DHTML, Crystal 
Reports, Java, VB, DCOM, MS: 
SQL and Oracle 8i; (j) Oracle 
Financials and PeopleSoft 
Tuxedo. Developer/Designer 
2000 and related tools; (k) 
Hyperion Essbase Apps. and 
related tools; (i) Oracle. 
Peoplesoft, ASP, Java and reiat- 
ed tools, SQA Robot, Mercury 
Test Director and Silk; (m) 
Clarify and related technologies 
(n) JDK, ASP, CORBA, Oracle 
SQL Server, Linux, VB and 
HTML (0) SAS and related pack- 
ages, Java, Business objects 
and Oracle. US Workers only. 
Consulting positions requiring 
travel. Prevailing wage/benefits 
;Send resume to HR, SSG, 2005 
Concord Pike, Suite 209 
Wilmington, DE 19803, identify- 
ing interested position(s). No 
Phone calls please 


Simulation Analyst. Develop work- 
force staffing models for Request 
For Proposal support in new busi- 
ness development. Design and 
develop call center simulation mod- 
eis using ARENA, SIMAN, ang 
CailSIM software to replicate client 
network. Database analysis of call 
center metrics to improve decision- 
making process. Must have Bach- 
elor's degree in Engineering, Math- 
ematics, Statistics or equivalent 
one year experience, and know! 
edge of ARENA v 5.0 or higher 
CaliSIM and SIMAN in Windows 
environment, C++ programming, 
VB 5.0 or higher; and TCS/EX 
Blue Pumpkin. Send resume with 
cover letter to Cindy Corkery, APAC 
Customer Services Inc., 6 Parkway 
North Center, Deerfield, IL 60015. 
EEO/AA 


APAC CUSTOMER SERVICES 
INC is not affiliated with APAC, Inc 

the road paving and construction 
materiais company 


Ft. Lauderdale software 
developer seeks software 
engineer to design, develop 
upgrade & implement soft- 
ware systems. Solid Clarion 
& Java programming skills. 
Reqd. BS or Foreign Degree 
Equi. in Computer Science & 
3 yrs of exp as senior pro- 
grammer analyst. Send 
resume to: Vito A. Bellezza, 
President Engineered 
Business Systems, 6801 
Powerline Road, Ft. 
Lauderdale, Fl. 33309 





@ careers.com 


Sales & Inventory Data 
Manager - Work w/ comp 
Software & databases to 
manage inven. for Ige, high- 
end fashion distributor 
Req'd: AAS in CS, Comp. 
Programming, or rel'd. tech 
fid. & 2 yrs. exp. in job/ rel’d 
pos. in sales &/or inven 
Data mgmt. Fluency in 
Italian; VB, C/C++, COBOL 
& HTML. Must have exp. w 
inv. mgt & contro! for Ige 
cor Send resumes to 
GVD, LLC; 645 5" Ave 
12" Fir, NY, NY 10022 


Optimal Solutions Inte- 
gration, Inc. has multipie 
openings for SAP and i2 
Consultants, Software 
Analysts and System 
Analysts. Please send 
resume with salary history 
and requirements to 
Optimal Solutions Integ- 
ration, 8445 Freeport 
Parkway #240, Irving, TX 
75063. Open to Green 
Card holders or US 
Citizens 


Systems Analysts/Soft- 
ware Engineers for con- 
sulting co in Chicago, IL 
Must possess Bach 
degree in Comp Sci/ 
Com Eng/Math or reltd 
field & 1-3 yrs exp in 
relatd position. Send 
resume to: U & X Group, 
1000 Route 9 North, 
Woodbridge, NJ 07095, 
attn: JC. 


Programmer Analysts 
needed w/exp in using 
Oracle, Informatica and 
Java. Erwin, EJB, SQL 
PL/SQL and SQL Server 
Implement & customize 
Oracle Applications on 
Windows NT/2000, Unix, 
Sun Solaris & Sun Sparc 
Solaris Operating sys- 
tems. Send resumes to 
Polysoft Corporation 
1560 S. Carriage Lane 
Chandler, AZ 85248 


and JDI 
IBM Websphere unde 
d AS/400 envir; coo 
between clients/t 


ertain user reqs; a: 


plan/execute qué 
R MS or 
S/Engg 
branch)/related field. Travel 
High salary. F/T. Apply 
to Salem Asso: e S 
405, 6th Ave, Ste 102, Des 
Moines, IA Ig 


Seeking qualified applic: 
following positions in Memphis. 
Collierville, TN: Senior Programmer 
Analyst. Formulate/define function 
al requirements and documentation 
based on accepted user criteria 
Requirement: 
in compute: 
of experience in 
s development 


© required. “Mas- 
in appropriate field will 
years of general experi- 

bmit resumes to 

George, FedEx Corporate 

1900 Summit Tow 
1400, Orlando, FL 32810 
OE M/F/D/V 


S/W Enggs: lead teams to analyze 
n, develop, appis us 
OBOL, JSP, Se 
HTML / ript, Jscript 
Jbuilder, Oracle iL, Sybase, etc 
s OS; interact 
to determine 
nility study; per- 


ptimization: 
embers, train end 
or foreign equiv 
ny branch) & 3 yrs of 
equiv in any of 
ove fields with 5 yrs of rele- 
vant progressive exp will also be 
»pted. High salary, F/T. Travel 
R S Compsoft 
up, Inc 
aumburg 


Megasoft Systems, inc. a SAP 
sulting firm has immediate 
multiple openings for 


in the development of to 
the utility industry using SAP R/3 
ABAP / 4 languages. 
es B.S. Comp. Sci. or rel 
field, or equiv. & min. 2 yrs. exp 
in job offered; must have good 
communication skills & be highly 
motivated. We offer competitive 
salary & benefits pkg. Qualified 
candidates send resume to: 
Attn.: Chad Wickes 
Megasoft Systems, Inc 
die Road # 300 
Bettendorf, IA 52722 


Sr. Programming Analyst 
(multiple positions). Design 
customized techn appl pro- 
grams. Install & config pro- 
gram prod. Determine tech 
infrastructure & comm. Req 
Test appl. Analyze, design & 
develop app. Interfaces using 
IBM AS400, RPGLE, ©/400 & 
Java/400. Req. BS in Comp 
Sci., Comp Eng. Or Elect 
Eng. And 5 yrs exp as Pro- 
grammer. 40 hr/wk. Job/inter- 
view site: Irvine, CA. Send 
resume to SVI Solutions, 
5607 Paimer Way, Carisbad, 
CA 92008 


Senior Software 

sponsible for research 

and developing computer 
ware systems. Will conceptual- 
ize, design and construct a 
framework for business applica- 
tion ing platforms 
including COBRA/J2EE. Design 
software systems using applica- 
tion dev >ment software and 
te such as C++ 

and ited design 
Must e f exp. in job 
offered. Salary Competitive 
Send resumes to: Wendy 
Davidson, Mentisys, Inc. 1375 
Remington Rd Ste A 
Schaumburg, IL 6! 3 


IT CAREERS 


Senior Technologist, Systems 
Development sought by Novartis 
Pharmaceuticals Corporation for 
East Hanover, NJ office. Must 
possess a Bachelor's degree or 
equivalent in Engineering or 
directly related field and 5 years 
exp. in software/systems devel- 
opment/design and analysis 
cluding Base SAS/SAS Macro 
inguage programming exp. for 
| industry Resp- 
‘ond to: Arlene O'Rourke, Human 
Resources Dept. Requisition 
#001 One 
O88E, E 


an EEO Employer 
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SOFTWARE ENGINEER 
Software engineer to design, devel- 
Op and test computer programs for’ 
business applications, analyze soft- 
ware requirements to determine 
feasibility of design; direct software 
system testing procedures using 
expertise in Oracle 9i, SQL 7.0. 
EDI, CR, nVision, ePay, eBenefit 
and Manager Self Service. Re- 
quirements: Bachelor's Degree or 
equivalent in Computer Science or 
related field and two years experi- 
ence as a software engineer or 
computer programmer, knowledge 
of Oracle 9i, SQL 7.0, EDI, CR. 
nVision, ePay, eBenefit and 
Manager Self Service. Salary 
$66,000/year. Working Conditions 
8:00 AM. to 5:00 PM 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Manager, Armstrong County 
Team PA CareerLink, 1270 North 
Water Street, PO Box 759. 
Kittanning, PA 16201-0759, Job 
No. WEB300685. 


Architectural lighting designer/ 
illustrator/illuminating Engineer’ 
needed. Seeking qual. candidates 
possessing BS or equiv. and/or 
rel. work exp. Part of the req. rel. 
work exp. must include 1 yr work- 
ing w/ 3-D modeling and lighting 
simulation. Formal training in 
Lighting Design or be a LC pre- 
ferred. Duties include: Design & 
develop illuminating, including day 
lighting, systems; Perform 3-D 
studies; Write specs; Perform 
computer simulations. Work with 
Lightscape, Adobe Photoshop, 
Viz-4, and AG1-32. Mail res., ref 
& Sal. Req. to Affiliated Engineers. 
PO Box 44991, Madison, Wi 
53744-4991 


Trusted by 
more 
hiring 

managers 

than any 
IT space 
in the 


world. 


(7) careers.com 
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SENIOR SOFTWARE ENGINEER 
to design, develop and implement 
web-based network management 
application software in a client/ 
server architecture using Visual C 
Shell Scripts, Visual Java and 
Visual C++ on Windows NT and 
Unix platforms for various network 
topologies, sockets, and routing 
protocols including TCP/IP, OSPF, 
EIGRP, BGP4, RIPv2, PPP, ATM. 
and frame relay; Develop, debug 
and test applications in C and C++ 
for Cisco and Nortel routers and 
switches, networking protocols. 
and topologies on UNIX platform: 
Design and implement internet. 
intranet and network security arch- 
itecture using firewalls and VPN 
technologies on UNIX platform 
Require: B.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related field with 
five years of progressively respon- 
sible experience in the job offered 
or as a Systems Analyst/Engineer. 
Extensive travel on assignment to 
various client sites within the U.S. 
is required. Competitive salary 
offered. Send resume to: Murli N. 
Reddy, President, Charter Global 
Inc., 5445 Triangle Parkway, Suite 
190, Norcross, GA 30092; Attn 
Job VS 


SENIOR PROGRAMMER/ANA- 
LYST to analyze, design, devel- 
op, test and implement applica- 
tion software using Visual Basic, 
C, C++, ASP, Visual Interdev, 
Active COM, HTML, Java Script, 
Visual Source Safe, Oracle, SQL 
Server and Edify under Windows 
NT/2000 operating systems 
Supervise and mentor junior pro- 
grammers. Require. B.S. degree 
in Computer Science, an Engin- 
eering discipline, or a closely 
related field with two years of 
experience in the job offered 
Extensive travel on assignment to 
various Client sites within the U.S. 
is required. Competitive salary 
offered. Send resume to: Murli N. 
Reddy, Charter Global Services. 
Inc., 5445 Triangle Parkway. 
Suite 190, Norcross, GA 30092; 
Attn: Job NB 


COMPUTERIT 

Applications Database Admin- 
istrator (White Plains, New York) - 
Requires Bachelor's degree in CS 
or Electronic Eng. (or equiv. for. 
eign educ.) & 3 years’ exp. in the 
job offered or 3 years’ exp. in use 
of ERwin & SEI-CMM structured 
programming methodology to dev. 
front-end database applications for 
investment mgmt. & brokerage 
ops. Exp. must include use of 
NOMAD on a VM/CMS operating 
system; and ADP’s Brokerage and 
PSR systems. Utilize ERwin and 
SEI-CMM structured programming 
methodology to deveiop front-end 
database applications for invest- 
ment mgmt. & brokerage ops. 40 
hrs./wk. 8:30 a.m.-5:30 p.m. Apply 
with resume to: Alliance Capital 
Management L.P., Attn: Karen 
Mooney, 1345 Avenue of the 
Americas, 46th Floor, New York. 
New York 10105. 


SENIOR PROGRAMMER/ANA- 
LYST to analyze, design, develop. 
test, implement and maintain e- 
commerce application software us- 
ing Visual Basic, Visual C++, C++ 
C, XML, XSL, HTML, ASP, VB 
Script, Java, Jscript, MTS, lS, SQL 
Server, Oracle, DCOM COM OOP, 
RDBMS, CSS, DHTML, Layers, 
Adobe Photoshop and MS SQL 
under Windows 2000/NT operating 
systems; Mentor junior program- 
mers. Require: B.S. degree in 
Computer Science/Engineering, or’ 
a closely related field with two 
years of experience in the job 
offered or as a Software Engineer. 
Extensive travel on assignment to 
various Client sites within the U.S. 
is required. Competitive salary 
offerea. Send resume to: Murli N 
Reddy, Charter Global Services, 
Inc., 5445 Triangle Parkway, Suite 
190, Norcross, GA 30092; Attn. 
Job BA. 
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TECHNICAL SALES 
REPRESENTITIVE 


Technical Sales Rep to prospect 
and establish new accounts. 
develop and penetrate existing 
accounts, build long term relation- 
ships with existing and new 
accounts and work with Technical 
Recruiters to service client require- 
ments. Must present product/ser 
vice information to customers and 
prepare RFi's. Duties will also 
involve extensive interaction with 
executives and project managers 
and require a broad range of tech- 
nical expertise. Rep must utilize 
extensive technical expertise and 
specialized knowledge of the IT 
industry to interact with customers 
regarding the technologies, pro- 
cesses and applications used by 
the customer and formulate plans 
outlining steps required to design 
implement and accomplish cus- 
tomer goals. Requirements: Bach 
elor's Degree or equivalent in 
Computer Science or related field 
and two years experience as a 
Technical Sales Rep. Extensive 
international travel is required and 
knowledge of Indian language is 
preferred. Salary: $104,000/year. 
Working Conditions: 8:00 A.M. to 
5:00 P.M., 40 hours/week. Apply 
Fayette County Team PA 
CareerLink, Attn: JS Supervisor, 
32 lowa Street, Uniontown, PA 
15401-3513 Job No 
WEB296712 


SENIOR PROGRAMMER/ANA- 
LYST to analyze, design, devel- 
op, test, document, enhance 
and support internet/intranet 
software programs in a client 
server environment for various 
commercial, business and web- 
based applications using Erwin. 
VB, ASP, COM, COM+, DCOM 
C, SQL*Forms, Reports, Crystal 
Reports, SQL*Plus, SQiL* 
Loader, HTML VBScript 
JavaScript, MS Access and SQL 
Server under UNIX and 
Windows NT operating systems. 
Require B.S degree in 
Computer Science, an Engin- 
eering discipline, or a closely 
related field with two years of 
experience in the job offered or 
as a Software Engineer. 
Extensive travel on assign- 
ments to various client sites 
within the U.S. is required. 
Competitive salary offered. 
Apply by resume to: Shri 
Gangal, President, Syspro 
Technologies. Inc 3091 
Hoicomb Bridge Rd., Suite H-2 
Norcross, GA 30071; Attn: Job 
MD 


Software Engineer consulting 
positions available - Develop. 
create, modify computer sys- 
tems/applications software and 
specialized utility programs 
analyze, design databases 
evaluate user needs, develop 
software solutions. Positions 
available in multiple skill sets 
including CRM. PeopieSoft. 
SAP and others. Travei and 
frequent relocation required 
EEO/AAP/M/F/V/H Submit 
resumes to Recruitment 
Coordinator, Rapidigm, inc 
Code# 103R, 4400 Campbells 
Run Road, Pittsburgh, PA 
15205. 


Programmer Analysts need- 
ed. Seeking qual. candidates 
possessing BS or equiv. and/ 
or rel. work exp. 1 year of the 
req. rel. exp. must inci. work- 
ing w/ Financial Accounting 
systems. Duties incl.: An- 
alyze user requirements and 
study existing systems to 
develop software architec- 
ture and develop automated 
financial systems. Mail res. 
and sal. Req. to Bernhardt 
Furniture, 1839 Morganton 

Lenoir, NC 28645. 
ATTN: HR 


Director - PeopleSoft Solutions 
Job location: Chicago, IL 
Duties: Resp. for project mgmt. 
for the delivery of tech. & finan- 
cial-related services based on 
PeopleSoft products. Resp. for 
recruiting, develop. & staffing of 
employees w/in the service line. 
Deveicp & execute annual 
strategic plans, quarterly tactical 
plans, achieve revenue & mar- 
gin targets. Act as sr. tech. & 
finance resource on strategic 
engagements, developing & 
managing tech. PeopleSoft work 
plans utilizing know! of 
PeopieSoft Internet Arch. (PIA) 
& infrastructure requirements 
Lead tech. team members & act 
as Tech Architect using 
PeopleTools to provide complex 
solution designs & conduct qual 
assur. reviews of other arch. 
designs. Requires: B.S. in 
Comp. Sci., Eng., Bus. Adm. or 
related field & 5 yrs. exp. in the 
job offered or 5 yrs. exp. as a 
V.P., Sr. Consult. or Assoc 
Concurrent exp. must incl. 3 yrs 
exp. in proj. mgmt. for tech-relat- 
ed services & 6 mths. exp. using 
PeopleSoft products. EOE. 40 
hrs./wk.; 8:00 a.m. to 5: p.m 
Send resume (no calls) to 
Diane Tuccito, AnswerThink 
Inc., 817 W. Peachtree St., Ste 
800, Atlanta, GA 30308. Must 
have legal auth. to work in U.S. 


Full-time Software Engineer Mid- 
dieware Developer responsible 
for program design and analysis. 
coding, testing and implementa- 
tion for numerous projects. De- 
fine applications architecture and 
document applications functional- 
ity expansion and customer inte- 
gration. Develop applications re 
quirement specifications and 
develop software and documen- 
tation according to established 
standards. Provide end-user sup- 
port, identify and troubleshoot 
defects found. Work with Oracle 
C++, PL/SQL, Java, MQ Series 
MSQI, E-SQL. Must have a Bach 
elor's degree in Computer Sci- 
ence, Information Systems or 
telated field. Educational and or 
work background must have 
included the above-referenced 
skills. Salary Competitive. Send 
resume to: Robbin Lee, United 
Parcel Service, 12380 Morris 
Road, Alpharetta, GA 30005 
Employer will not sponsor visas 
for position 


Should be having 7 + Years of |.T. 
experience in Analysis, Coding 
Testing for Development and main 
tenance applications on Mainframe 
Platforms using COBOL, DB2, DB2 
Stored Procedures, IMS DB, JCL 
CICS, VSAM, TERADATA, MVS & 
VM, OS/390 and tools FILEAID. 
XPEDITOR, QMF UF!, CHAN- 
GEMAN, SCA, CA7, Micro Focus 
Revolve, INTERAGATE. Ability to 
program complex systems, Analy- 
sis and problem solving skills 
involved with full project life cycle 
for vanous projects and experience 
with Teradata towards data ware 
housing for more than three years 
is a huge plus. 40hr/wk, competitive 
salary. Resumes should be sent to 
226 Paul St.#204, Pittsburgh, PA 
15211.Job Order#295697 


Business Systems Analysts 
needed. Seeking qual. candi- 
dates possessing BS or 
equiv. and/or rel. work exp. 
Part of rel. exp. must incl. 2 
yrs. working w/ financial sys- 
tem projects. Duties incl 
improve business processes 
via information tech. Auto- 
mation; perform improve- 
ment studies; plan, monitor & 
control project execution 
Mail res. and sal. Req. to 
Bernhardt Furniture, 1839 
Morganton Bivd., Lenoir, NC 
28645, Attn: HR 
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RESOURCES 


How to Contact 


COMPUTERWORLD 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
editors and the appropriate beat reporter. 


Maryfran Johnson, editor in chief 
(508) 820-8179 


DEPARTMENT EDITORS 
Don Tennant, News editor 
Craig Stedman, assistant News editor 
Julia King, Management editor 
Jean Consilvio, 
Tommy Peterson, Technology edito 
Mitch Betts, director 


508) 620-7714 
508) 820 
610) 532-7599 
508) €20-8562 
(508) 620-7729 
(301) 262-8243 


istant Management editor 


Knowledge Centers 


REPORTERS 


Bob Brewin, mputing/wireless; intel PC: 
and servers. 1 care 
Matt Hamblen, networking; network systems mai 


mmerce 


Thomas Hoffman, 


sues; energy 


mobile cc 
(505) 425 
nagement 
(508) 820-8567 
yMation economic 
investment is: 
Lucas Mearian, financial services; storage 


IT management 


Linda Rosencrance, general assignment 


rtation 


Carol Sliwa, Microsoft; Web services te: agIe: 


development: retai! 
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Patrick Thibodeau, state/federal government: antitrust 
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Dan Verton, : (703) 321-2277 
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Todd R. Weiss, genera! assignment: Linux 
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OPINIONS 
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Mark Hall, opinions editor 
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Jamie Eckle, managing editor/production 
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Continued from page 1 


and business alliances at The 
Lared Group in Los Angeles. 
“They have not only a legal 
but also a fiduciary obligation 
to do this when dealing with 
sensitive products like the 
software sold by Ptech,” she 
said. 

Ptech CEO Oussama Ziade, 
however, isn’t convinced that 
lack of research is what now 
threatens the life of his com- 
pany [QuickLink 35704]. 

“How far are we going to go 
with making links between 
people?” he asked. “And how 
are we supposed to know be- 
fore the fact?” he added, refer- 
ring to the investigation into 
his company for ties to indi- 
viduals who weren’t on any 
government watch list when 
they were approached by 
Quincy, Mass.-based Ptech. 

In fact, some of the same 
people whose past connec- 
tions to Ptech raised federal 
investigators’ suspicions can 
also be linked to other U.S. 
companies, according to for- 
mer senior government terror- 
ism experts and government 
documents. 

For example, Yaqub Mirza 
resigned from Ptech’s board in 
March 2002 after the FBI raid- 
ed several Muslim charities 
and businesses he had helped 
set up in Herndon, Va. 

According to Ziade, a dis- 
gruntled former Ptech em- 
ployee sent an e-mail to the 
FBI last summer that identi- 
fied Mirza as a close associate 


of Yassin al-Qadi, a Saudi busi- | 


nessman who invested in 
Ptech in 1994 and who has 
since been added to a govern- 
ment terrorism watch list. 
That association has been 
confirmed by at least two for- 
mer USS. intelligence officials. 
But documents filed with 
the U.S. Securities and Ex- 
change Commission in 1999 
show that Mirza was also a 
member of the board of direc- 
tors of Mylex Corp., a develop- 


| quently acquired Mylex from 





er of RAID and network man- | 
agement technologies that was 
acquired by IBM that same 
year. Mirza owned 3.95% of 
the company, more than any of 
the other directors or execu- 
tive officers, according to the 
SEC documents. 

IBM declined to comment. 
But Kevin Brett, a spokesman 
for Milpitas, Calif.-based LSI 
Logic Corp., which subse- 


IBM, said the Mylex board was 
dissolved upon the company’s 
acquisition by IBM. He added 
that LSI has “no insights into 
the Mylex decision-making 
process relative to its board of 





directors during the course of 
its existence as an indepen- 
dent company.” 

Meanwhile, Hybridon Inc., a 
biotechnology firm in Cam- 


| bridge, Mass., appears to be in 
| a position similar to Ptech’s 


with respect to its investors. A 
list of investors in a June 2001 
Hybridon proxy statement 
filed with the SEC includes 
Abdelah bin Mahfouz, the son 
and business partner of Khalid 
bin Mahfouz, former head of 
the The National Commercial 
Bank of Saudi Arabia. Khalid 
was placed under house arrest 
by the Saudi government prior 
to the Sept. ll attacks for al- 





lowing the bank to channel 
funds to al-Qaeda front com- 
panies, said Vince Cannis- 
traro, former chief of opera- 
tions at the CIA’s Counterter- 
rorism Center. 

Earlier SEC filings show 
that another member of the 
family, Abdulrahman bin Mah- 
fouz, also held stock in Hybri- 
don. Also a board member of 
National Commercial Bank, 
Abdulrahman served on the 
board of Blessed Relief, a Su- 
dan-based charity that U.S. in- 
telligence officials have char- 
acterized as a front organiza- 
tion for Osama bin Laden. 

Stephen Seiler, CEO of Hy- 


Asset Management 
Projects Falling Short 


Users and analysts warn against relying 
too heavily on packaged applications 





BY THOMAS HOFFMAN 
NFORMATION TECHNOLOGY 
asset Management pro- 
grams underwent some- 

thing of a rebirth in recent 

years as corporate cost-cutting 
efforts forced IT managers to 
do a better job of tracking 
technology investments. But 
many of the programs have 
fallen into disrepair, users and 
analysts said last week. 

One of the problems CIOs 
and other IT executives en- 
counter is that they often 
place too much emphasis on 
using asset management soft- 
ware to track their technology 
inventories, said Pat Cicala, 
president and CEO of Cicala 
& Associates LLC, a Hoboken, 
NJ.-based asset management 
services and research firm. 

In doing so, the IT man- 
agers don’t pay enough atten- 
tion to the people and pro- 
cesses needed to manage such 
efforts, Cicala added. “I'd say 
that more than 80% of IT asset 





management programs either | 


stall or become problematic, 
even if they’ve got a few years 
under their belts,” she said. 

That’s why Steve Ham- 
mond, vice president of infor- 
mation services at Plasti-Line 
Inc. in Knoxville, Tenn., rec- 
ommends that an asset man- 
agement program be simpli- 
fied as much as possible. 
“Don’t overcomplicate it with 
a software solution, where you 
become a slave to the soft- 
ware,” he said. 

Plasti-Line, which makes 
signs, menu boards and other 
corporate branding products, 
implemented an asset man- 
agement program four years 
ago when it standardized on 
Dell Computer Corp.’s PCs 
and servers. Dell slaps an as- 
set tag on every piece of hard- 
ware that Plasti-Line buys or 
leases, and Plasti-Line uses an 
Excel spreadsheet to track the 
equipment, Hammond said. 

Valassis Communications 
Inc. considered buying an as- 
set management system. But 





as a midsize company with 
just 1,000 PCs, it was hard to 
show a potential return on in- 
vestment to justify the pur- 
chase, said Amy Courter, vice 
president of IT at the market- 
ing services firm in Livonia, 
Mich. Like Plasti-Line, Valas- 
sis relies upon spreadsheets. 

T-Systems Inc. in Lisle, IL. 
this month introduced a ser- 
vice aimed at improving the 
success rates of companies 
with faltering asset manage- 
ment programs. T-Systems 
said the AssetQuickView ser 
vice, which starts at $20,000, 
is designed to attack three of 
the culprits of asset manage- 
ment malaise: lack of docu- 
mentation, uncertain require- 
ments and incomplete asset 
inventory data. 

Many asset management 
programs run into trouble be- 
cause IT departments tend to 
conduct quarterly sweeps of 
IT inventories and “end up 
missing what’s going on out 
there” between the sweeps, 
said Howard Rubin, executive 
vice president at Meta Group 
Inc. in Stamford, Conn. Such 
programs fail because compa- 








bridon, said his company has 
conducted “extensive due dili- 
gence” to “vet our sharehold- 


| ers.” Seiler said his company is 


“unaware of any link between 
Mr. bin Mahfouz and any in- 
vestigation.” 

But companies in Hybri- 
don’s position at the very least 


| face a perception problem, an- 
| . Pr 
alysts said. “Can these execu- 


tives seriously expect the pub- 
lic to believe that they didn’t 
know whence the money was 
coming?” Segil asked. “Is it 


| that they didn’t want to know 


and so didn’t check? Or didn’t 
know and didn’t care because 
money is money?” D 


Keepin 
Tabs : 


ClOs and analysts offered the 
following tips for fixing faulty IT 
asset management programs: 
ARTICULATE the reasons why 
your program isn’t working and 
create a plan and timeline for 
demonstrating improvements. 


DEDICATE workers to monitor 
the progress of your asset man 
agement efforts instead of mak- 
ing that an added responsibility 
for IT staffers. 


DON’T UNDERESTIMATE the 
personnel and processes re- 
quired for an effective program. 


CREATE closer ties between the 
employees who manage your IT 
assets and end users. 


STAY on top of your program and 
keep pace with constantly 
changing technology inventories. 


nies use procedures that 
“don’t give them timeliness 
and accuracy,” he said. 

IT departments that are 
struggling to get funding for 
asset management programs 
should start small with a proj- 
ect such as tracking distrib- 
uted software licenses to show 
the value of the concept to se- 
nior management, suggested 
Frances O’Brien, an analyst at 
Gartner Inc. in Stamford. D 
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FRANK HAYES # FRANKLY SPEAKING 


An Uneasy Feeling 


F YOU READ BETWEEN THE LINES of Carly Fiorina’s current 
stump speech — the one she gave at Comdex, the one she 
gave last week to a group of resellers — maybe you feel a little 
uneasy. And you should. Hewlett-Packard’s CEO has been 
telling audiences that business is down because corporate 
customers want to cut IT costs and get real business results from IT. 
And she calls that a permanent change in customer requirements. 
What she means, of course, is that customers no longer just want 
those things. After all, they’ve wanted them for years, but now they 
have to cut IT costs and get business results, because they no longer 
have the IT budgets to spend and CEOs have run out of patience 


with CIO promises. 

And if Fiorina is to be believed, she never ex- 
pects to see healthy IT budgets or a free ride 
for shiny new technology again. 

Do I believe her? Naaah. It’s politically cor- 
rect to sympathize publicly with customers 
whose budgets have been cut. It’s shrewd lead- 
ership to tell the sales force there’s no use in 
squeezing existing customers for more revenue. 
And it’s good marketing to stake out a “we'll 
help you cut IT costs and build value” position. 

If Fiorina really thought IT budgets will nev- 
er recover, she’d have bailed out of HP long be- 
fore she gave that stump speech for the first 
time. If your customers’ budgets are drying up 
permanently, you don’t want to stay in a busi- 
ness that’s doomed to spiral down to nothing. 

Then again ... what if she’s right? What if 
that uneasy feeling isn’t just your imagination? 

After all, our healthy budgets have long been 
the basis for our relationship to vendors. For 
decades, IT shops have turned to vendors for 
technology guidance. Vendors did the technolo- 
gy research, invented the paradigms, cobbled 
together “solutions.” Then they told 
us what to do, and we decided 
whether to spend the money on 
what they proposed. 

We didn’t just look to them for 
products. We depended on them for 
technology leadership. OK, their 
technology solutions didn’t always 
pan out as effective business tools. 
But they were always coming up 
with something new, so we had a 
steady stream of new IT ideas. And 
the system seemed to work pretty 





3 
world's senior news colum- 
nist, has covered ii formore solutions, to define what our busi- 


But now the money isn’t flowing, and we’ve 
come to something of an impasse. It doesn’t 
matter how great a vendor’s technology solu- 
tion is if IT shops don’t have the budget to buy 
it. Vendors keep trying to lead, but these days 
we can’t afford to follow. 

Sure, that happens whenever the economy’s 
down. But what if Fiorina is right, and there’s 
been a permanent shift to reduced IT spending 
and an absolute requirement of business advan- 
tage from IT projects? 

If that’s the case, then we can’t let vendors 
lead us any longer. 

It’s not just that we don’t have the money. It’s 
also that they don’t know our business process- 
es and requirements and users. As tough as it is 
for IT shops to understand the nuances and pe- 
culiarities of what our businesses need, it’s far 
more difficult for technology vendors to under- 
stand those things from the outside. 

Technology isn’t enough. To deliver business 
advantage, we’ve got to solve business prob- 
lems — the problems of our business. And that 
kind of solution won’t come out of 
a box from a vendor. 

No wonder Fiorina’s words 
aren’t exactly comforting. No won- 
der they put us ill at ease. If she’s 
right, we can’t afford to let vendors 
lead us — can’t afford it from the 
budget or the business advantage 
standpoint. 

And if we can’t turn to vendors 
for IT leadership for our business- 
es — to give us answers, to offer us 


well as long as the money kept flow- Kaediid ani Contacthimat nesses need — we'll have to pro- 


ing: They led, we spent. 


vide it ourselves. D 
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MARCH 31 — APRIL 2, 2003 
THE FAIRMONT COPLEY PLAZA 
BOSTON, MASSACHUSETTS 


CTO & IT EXECUTIVE CONFERENCE 


CTO Forum 2003: 


Traction through Technology 


An ROI Roadmap to Web Services, 
Pervasive Computing, Security and Standards 


CTO Forum is designed for those senior and executive-level technologists who are 
leading their enterprise technology strategy. InfoWorld invites you to join today's 
leading technology professionals and vendors in a two and a half day, invitation-only 
event. Please visit infoworld.com/ctoforum to request an invitation at the early-bird rate. 


FEATURED TOPICS INCLUDE: CONFIRMED SPEAKERS INCLUDE: {as of Jan 14) 

© Payback: How We Profited From Our Web Services Justin Abel, Head of Americas Development, Reuters 
Implementation Curtis Brown, CTO, Princeton Review 

° The Case for Open Source in the Enterprise Rick Carey, Chief Technology Architect, Merrill Lynch 

* Standards: Which Size Fits All? Adam Cohen, Chief Developer, Jet Biue 

° The Reiationships Between Identity and Security Scott Dinsdale, EVP, Digital Strategy, Motion Picture 

© Next Generation Computing: The Grid in Your Future Association of America 

* Business Process Integration lan Foster, Professor of Computer Science, University of 

© A Technology Roadmap For Your Enterprise Chicago and Associate Director, Mathematics and Computer 

Science Division, Argonne National Laboratory 

PLATINUM SPONSORS: {as of Jan 14) Enzo Micali, SVP and CTO, 1-800-Fiowers 

Ameet Patel, CTO, LabMorgan 

Kevin Pollari, Partner & Global Lead for Architecture Strategy 

& Assets, Accenture 
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Robert Sutor, Director of Web Services Strategy, IBM 
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ROWValue Management 


BUILD MORE BUSINESS VALUE 
INTO YOUR IT INVESTMENTS 


With mounting profit pressures and demands 
for cost control, every investment must produce 
rapid and predictable business value. As the 
world’s third largest IT company, Fujitsu can 
show you how to improve your return on IT. 


Our experienced consultants will align your 
technology with your business strategy for 
improved performance. And our enterprise value 
management, application outsourcing and IT 
effectiveness experience can help maximize the 
value from IT while reducing total IT costs up 
to 30% in three years. 


Along with the right blueprint, a solid infrastructure Cc 

forms the foundation for business effectiveness. 

By eliminating “server sprawl? our exceptionally FU TSU 
reliable and scalable UNIX servers will lower 

TCO and improve productivity. 


For free white papers showing how to maximize THE POSSIBILITS ES ARE INFINITE 


your Return On IT, visit us.fujitsu.com/ROIT. 


Working together, we can accomplish anything. us.fujitsu.com 








